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Abstract 

This thesis presents an approach for direct and efficient synthesis of self-timed (asyn- 
chronous) control circuits from formal specifications called Signal Transition Graphs (STGs). 
Control circuits synthesized from this graph model are speed-independent and capable of 
perfoming concurrent operation. The property of speed-independence means that the cir- 
cuit operates correctly regardless of variations in delays of logic gates, thus implying that 
the circuit is hazard-free under any combination of gate delays. The capability of STGs 
for explicitly specifying concurrent operations internal to a control circuit is unique to this 
model, unlike other approaches based on Finite State Machines. 

STGs are a form of interpreted Petri nets, in which transitions in a net are interpreted 
as transitions of signals in a control circuit. While other synthesis approaches based on 
Petri nets have not been very successful, we have developed a number of analytical results 
which establish the equivalence between the static structure of nets (their syntax) and 
their underlying firing sequence semantics — an analytical approach called structure theory 
of Petri nets. This equivalence permits the characterization of the low-level properties of 
control circuits in terms of STG syntax: the properties of deadlock-free and hazard-free 
of circuits are characterized as syntactic propeties of liveness and persistency of STGs. A 
preliminary STG specification of a control circuit can be modified into one which is live 
and persistent, from which a deadlock-free and hazard-free logic implementation can be 
derived mechanically. 

STGs allow efficient synthesis of control circuits by using a method of decomposition 
based on a graph-theoretic technique called contraction. Instead of implementing a logic 
circuit from a STG directly, it can first be decomposed into a number of contracted nets, 
one for each signal generated by the control circuit. A logic element can then be determined 
from each contracted net, and the composition of logic elements produces the final circuit 
implementation. 
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... All things entail rising and falling timing. You must 
be able to discern this. In strategy there are various tim- 
ing considerations. From the outset you must know the 
applicable timing and the inapplicable timing, and from 
among the large and small things and the fast and slow 
timings find the relevant timing, first seeing the distance 
timing and the background timing. This is the main 
thing in strategy. It is especially important to know the 
background timing, otherwise your strategy will become 
uncertain. 

A Book of Five Rings 
Miyamoto Musashi 
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. . . All Signal Transition Graphs entail rising and falling 
signal transitions. You must be able to discern this. In 
our design method, there are various timing consider- 
ations. From the initial specification, you must know 
the allowed timing and the disallowed timing, and from 
among the large and small circuits and the fast and slow 
logic gates find the relevant timing, first seeing the dis- 
tance timing and the timing protocol at the interface. 
This is the main thing in our design method. It is espe- 
cially important to know the timing protocol, otherwise 
your circuits will not work. 



Chapter 1 



Introduction 



1.1 Objectives 



The main objective of this research is the development of a design approach for asyn- 
chronous self-timed VLSI digital systems. The core of our approach is a graph model 
called Signal Transition Graphs (STGs). STGs allow the specification and efficient synthe- 
sis of self-timed control circuits. Our approach produces speed-independent logic circuits 
which can perform concurrent operations. 

In the realm of VLSI, exploiting concurrency is a prerequisite to high-performance: as 
systems become larger and more complex, one can no longer afford to ignore the parallelism 
in control operations. The central control discipline which is well-accepted in present 
approaches creates difficulties in high-performance systems by imposing an unnecessary 
sequential order on the execution of control operations. In choosing a control discipline 
which allows for parallel execution of unrelated operations, one naturally moves toward 
a distributed control organization. Thus, instead of a large central controller, one has 
numerous distributed control modules which can operate concurrently. STGs allow the 
specification and synthesis of these types of control modules — not only that they can 
operate concurrently, but also each module itself can perform several control operations in 
parallel. 

By speed-independent circuits, we mean those circuits whose correct operation is inde- 
pendent of the delays of logic gates composing the circuits. One immediate consequence 
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of this property is that speed-independent circuits are always hazard-free. These types of 
circuits are desirable in VLSI systems because it is usually difficult to fine-tune the delays 
of logic gates to make an asynchronous digital circuit work properly. Perhaps most impor- 
tantly, the use of speed-independent circuits enables the separation of the correctness of 
systems from timing considerations (which inextricably depend on many physical factors 
and phenomena in VLSI circuits). It is no coincidence that a number of research efforts 
in silicon compilation have utilized speed-independent circuits as a basis for hardware 
implementation [1,42]. 

STGs allow the direct and efficient synthesis of control circuits from formal specifica- 
tions. Unlike previous efforts, the approach based on STGs produces a specification which 
closely reflects the designer's intuition. Moreover, this approach produces efficient circuit 
realizations by using a number of decomposition techniques. While speed-independent 
circuits have been criticized for their inefficiency in implementation (and therefore speed 
and performance), our experiences with applying this graph model, to designing VLSI chips 
have been much more encouraging. 



1.2 Background 

We can categorize research works in self-timed systems according to two attributes: the 
theoretical models on which the research is based, and the particular aspects chosen for 
study. In terms of models, there are finite automata and Petri nets [39,41], and variations 
of the two. With regard to aspects of study, the two chief areas of concern are composition 
of systems from modular descriptions, and synthesis of modules from specifications. The 
study of composition of systems from self-timed modules usually assumes the presence of a 
set of modules with a certain uniform communication discipline, and the investigation takes 
a system point of view in exploring properties of systems composed from the modules. The 
other area of concern concentrates on techniques for synthesis of control modules rather 
than on the composition and communication aspect of systems. 

Two prevalent concepts describing the properties of self-timed systems are delay-insen- 
sitivity and speed-independence [35,36,37]. While these are commonly used interchangeably, 
we often find that delay-insensitivity has connoted a stress on the communication aspect 
and hence, the composition of systems. Thus, this terminology denotes an external prop- 
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erty of control modules. On the other hand, speed-independence is usually understood 
as a property of control circuits which operate correctly regardless of variation in delays 
of logic gates. Speed-independence emphasizes the synthesis aspect, hence is a property 
internal to control modules. 

Regardless of the emphasis of these research works — whether on composition or on 
synthesis — they require a formal specification which must rest on the theoretical model 
chosen. We have found that Petri nets provide a better starting point for formally spec- 
ifying self-timed circuits, since Petri nets per se have capabilities for explicitly modeling 
concurrency. Also, automata theory originally concentrated on sequential systems. Not 
until recently was the basic theory extended to cover aspects of concurrency, and not until 
even later was it applied to the area of logic design. 

Below, we briefly review some of the relevant works according to the outline above. 
In short, each proposal identifies a basic model which also serves as its formal tool for 
specification, and a focus of study (i.e. composition or synthesis). Interestingly, most 
of the works deal with only one of the two areas; and none of them provides a coherent 
framework for treating both synthesis and composition at the same time. This survey is 
by no means exhaustive; it only serves to highlight the more relevant results which fit more 
into our classification. 

Most techniques for synthesis of asynchronous logic are based on either some form 
of finite automata such as the Finite State Machine (FSM) model, or Petri nets. The 
most outstanding work based on finite automata models can be traced back to Muller 
[35,36,37], who originated the idea of speed-independent circuits. Recent work in trace 
theory [42,53,51] can be considered as a systematic reformulation of Muller's idea: this 
refinement is made possible because of the recent attempts to extend automata theory to 
cover concurrent behavior of systems. 

Concerning synthesis approaches based on Petri nets, one of the most important early 
contributions was made by Patil and Dennis at MIT [15,17,16,38]. Patil invented asyn- 
chronous logic arrays as a systematic method of directly implementing Petri nets [38]. In 
an asynchronous logic array, columns of wires are connected to storage elements to simu- 
late the places of a net, while rows of wires decode the state of the columns to simulate 
the occurrence of transitions. Thus, this method of implementation transfers the structure 
of a net directly to hardware. Dennis has shown that Petri nets can be used to model 
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asynchronous hardware systems at many levels of description in a very clear and easily 
understood manner [15]. Dennis' description of the control logic of the Control Data 6600 
computer, which embodied instruction look-ahead and interleaved execution, demonstrated 
this technique. Dennis and Patil also elucidated an organization principle for asynchronous 
hardware systems in which a system is partitioned into data paths and distributed control 
structures, the latter organized as asynchronous modules which communicate with each 
other using certain signaling protocols [17,16]. Based on this organization principle, we 
have successfully designed and fabricated a self-timed two-by-two packet router, a basic 
component of a packet communication network [10]. 

Works at Washington University have also made important contributions to the study 
of self-timed systems, most importantly the use of macromodules proposed by Clark [11], 
and experimental proof of metastability problem in synchronizers, together with design 
techniques for alleviating this problem [7,13,47]. Most recently, Molnar et al. [34] proposed 
the use of a form of Petri nets called I-nets for specifying behavior of control circuits, from 
which Interface State Graphs (ISG) are derived by simulating the I-nets. ISGs can then 
be encoded with binary states and serve as the basis for implementation of control circuits 
as standard Huffman asynchronous state machines. This idea was inspired by Seitz's 
Machine-nets [46] but contained a number of improvements. 

Work at CalTech by Seitz resurrected interest in self-timed systems in the VLSI era, 
as reported in a chapter of Mead and Conway's book Introduction to VLSI systems [32]. 
Currently, Martin [30] at CalTech proposed a design approach using constructs for non- 
deterministic programming to specify hardware modules whose behaviors exhibit only se- 
quencing and arbitration requirements. This approach uses a subset of Dijkstra's guarded 
command language [18] to specify each process; concurrently cooperating processes are 
described using notations similar to Hoare's CSP [25]. Heuristic procedures are used to 
"compile'' a hardware implementation from a module specification into an interconnection 
of standard hardware templates such as And, Or, C-elements, etc. During the compilation, 
the technique of reordering signal transitions in a sequence is used to improve implemen- 
tation efficiency. 

Recently, there have been works which use trace theory as a formalism for specifying 
delay-insensitive circuits. Trace theory was pioneered by Mazurkievicz, who has recently 
made further contributions to this theory [31]. Trace theory has been used in the COSY 
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formalism invented by Campbell and Habermann [6] and in CSP. Hem, Snepscheut and 
Udding at Eindhoven have demonstrated the use of trace theory for classifying and rea- 
soning about composition of delay-insensitive circuits [42,53,51]. Trace theory has laid a 
firm theoretical foundation for further investigation of properties of concurrent circuits, as 
evidenced through recent works [5,45]. Perhaps one novel aspect of these works in com- 
parison with the others is a method for classification of delay-insensitive circuits according 
to properties of their trace structures [51]. 

There are a number of earlier works concerning the composition of systems from asyn- 
chronous hardware modules; many were reported at the Project MAC Conference on Con- 
current Systems and Parallel Computation (ACM, 1970). One notable study was made by 
Keller at University of Utah, in which he proposed the use of a set of "universal" control 
modules from which any control network can be constructed [28]. 

One of the important related works to self-timed systems is the use of temporal logic for 
verification of asynchronous hardware structures [19]. Such techniques can be used fruit- 
fully for correctness validation of self-timed circuits and systems composed from circuits. 
It may also be a candidate for a formalism for specification and synthesis of self-timed 
circuits. 



1.3 Problems with some previous models 

Below, we describe a number of well-known difficulties with some traditional approaches for 
designing asynchronous circuits. In particular, we discuss problems with the FSM model 
and with earlier attempts to apply Petri nets. By identifying these problems, we hope to 
illustrate the difficult practice of designing asynchronous circuits; this will motivate the 
search for remedies, some of which are provided by the approach we present in the following 
chapters. 

Traditionally, asynchronous circuits are designed using the FSM model. A method for 
realization devised by Huffman uses a flow-table and a circuit model for implementing the 
state machine, as described in textbooks such as [20]. This design approach is very difficult 
to use, especially for synthesizing circuits with many input variables. So far, it has limited 
applications because of problems caused by variations in gate delays, particular in the 
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feedback paths of the circuit. Some of the frequently cited disadvantages and limitations 
of this implementation model are: 

• The Huffman state machine cannot handle unrestricted input changes. It was dis- 
covered by Unger [52] that in the Huffman state machine, if two input transitions 
occur within a time interval (i) less than min^Di, + Df), then they can be consid- 
ered as simultaneous, if (ii) greater than max(Di, + Df) then they can be consid- 
ered separate, and if (iii) less that max(Di + Df) and greater than min{Di, + I?/), 
then the secondary state variable will not have settled and the circuit malfunctions; 
maxDL, minDi, denote the maximum and minimum delays of the combinational 
logic, and maxDf, minDf denote those of the feedback delays. (In general, minDj 
has to be greater than zero.) 

• The FSM model cannot describe concurrent behaviors directly. The FSM model and 
the Huffman state machine are based on the use of central states. At any moment, 
the machine resides in one state and it reacts to input excitations in different ways 
depending on which state it is in. A serious drawback of this state-based approach is 
that it is incapable of describing concurrency directly. The reason is that the notion 
of concurrency is more conveniently expressed in terms of occurrences of events; at 
the level of description of the FSM model, this phenomenon is difficult to see. 

• The state assignment problem. Since it is difficult to match gate delays to achieve 
simultaneous transition of state signals, one has to make sure that simultaneous 
changes in state signals do not occur, or if they do, the circuit must be designed 
such that it behaves the same no matter which sequences of state changes take place. 
Hence most state assignment techniques only allow at most one signal change between 
states. This is a well-known hard problem for which many heuristic techniques have 
been proposed. State assignments serve another purpose in the implementation of 
state machines, that of decomposition. This further complicates the issue, as an 
optimal state assignment for decomposition may be in conflict with the requirement 
for single signal changes betweeen states. 

• The exponential dependence of the number of entries in the flow table on the num- 
ber of input signals. Due to the absence of a controlling signal called a "clock", a 
Huffman asynchronous state machine continuously senses the changes in the input 
and produces changes at the output and the state variables. Therefore, in contrast 
to a synchronous implementation of a state machine, an asynchronous implementa- 
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tion requires the listing of all input combinations in the flow table, resulting in the 
exponential increase in the number of entries in the table. 

There are a few early proposals for implementation of asynchronous circuits from Petri 
net specifications, most notably Patil's asynchronous logic array and Seitz's Machine-nets. 
Patil's proposal is more correctly viewed as a hardware implementation of Petri nets, 
rather than implementation of asynchronous circuits from net specifications, because his 
technique basically replaces an element in a net with a hardware circuit which simulates 
the behavior of that element. Hence the structure of the net is transferred directly to 
hardware and there is no direct way to ensure that the resulting asynchronous machine 
meets all timing requirements. The operation of this type of asynchronous logic arrays 
depend greatly on local timing, and meeting these timing constraints can sometimes be 
difficult. 

Seitz's Machine-nets, on the other hand, serve only as specifications from which FSM 
descriptions can be derived. The synthesis of a Huffman state machine from such a de- 
scription still requires the standard techniques and therefore faces the same difficulties. 

1.4 Main contributions of this work 

We have developed a synthesis approach for self-timed control circuits from graph-theoretic 
specifications called Signal Transition Graphs, a form of interpreted Petri nets. As will be 
described in the rest of the thesis, our original contributions are the following. 

• A set of new analytical results for Petri nets which allows the study of net proper- 
ties purely from the syntax (or structure) of nets; we call this the structure theory 
approach. 

• The development of Signal Transition Graphs, a formal model for specification and 
direct synthesis of self-timed control circuits with concurrent deterministic operation 
and input choices. 

• A decomposition technique of nets based on a graph-theoretic notion called con- 
traction. This technique can be applied directly to Signal Transition Graphs, thus 
allowing highly efficient implementations. 
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• An extension of the Signal Transition Graph model to allow the specification and 
synthesis of data-dependent control circuits. 

1.5 Experimental results 

In early 1984, we set out to test our Signal Transition Graph model by designing and 
fabricating two self-timed chips through MOSIS. The first chip is a two-by-two packet 
router [10], a basic component of a communication network for a dataflow computer en- 
visioned at MIT [14]. The router was implemented in 3 micron CMOS technology with 
2456 transistors and a layout area of 3.1 x 2.3mm 2 . A total of 46 routers were tested and 
30 of them were fully operational with a maximum throughput rate of approximately 22 
Mbytes/sec. 1 The other chip fabricated was a self-timed ring buffer, a FIFO buffer with 
an interesting distributed organization which reduces the latency of the buffer to one stage 
delay [9]. This ring buffer consists of 8 stages and 9-bit wide data paths. It was fabricated 
in 4 micron NMOS technology and consumed an area of 3.15 x 2.25mm 2 , including pads. 
Six chips were received from MOSIS and tested; five were fully functional at a throughput 
rate of approximately 4 MBytes/sec. These encouraging results indicate that our proposed 
approach produces systems which are efficient both in terms of the amount of hardware 
and speed, perhaps comparable to synchronous implementations. 

Description of the Router 

The block diagram of the router is shown in Fig. 1.1. It contains two FIFO queues to 
hold packets sent in byte-serial format. Packets are of variable length, and an extra bit 
called Last-byte is appended to each byte to delimit the packet boundary. This bit is "1" 
for the last byte of a packet and "0" for all others. The first byte of a packet contains 
the address information. The router decodes the address and forwards the packet to the 
desired output port; an address bit of "0" will form a link from the current input port 
to the upper output port, a "1" will form a link to the lower output port. There are 
two system controllers, each consisting of a FSM and a distributed control structure. The 



1 In [10], the maximum throughput rate for the routers was reported to be 11 Mbytes/sec. This figure 
is for one input port. The above figure of 22 MBytes/sec reflects the fact that two input ports can process 
packets concurrently. 
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system controllers read the address and the Last-byte signals, and generate control signals 
for the output multiplexors. These control signals are determined from the first byte of a 
packet and recycled for the remaining bytes. The two controllers also communicate with 
each other, since packets from one input port may need to go to the opposite output port. 
If packets from both input ports require the same output port at the same time, an arbiter 
is used to resolve conflicts. 

Two main data path modules are the multiplexors, and the self-timed registers which 
constitute the FIFO's. These modules consist of a data circuit and a stage controller 
which handles the timing and signaling protocol. These stage controllers are specified 
using STGs from which speed-independent realizations can be obtained using our synthesis 
techniques. The controllers contains control circuits which are also synthesized using the 
same techniques. The Resource Locking Module (RIM), a control module with data- 
dependent operation is treated in an example in Chapter 9. This module is used together 
with an arbiter [32] to control the access of the FIFO queues to the output multiplexors. 



Description of the Ring buffer 

The ring buffer is a FIFO queue organized in a two-dimensional or ring organization, as 
shown in Fig. 1.2. This queue consists of M linear queues, each of L stages, and two token 
rings for controlling input/output operation. The capacity of the queue isMxI and the 
latency is proportional to L. 

Writing into the FIFO queue is controlled by an Input token ring, formed by connecting 
I-modules together into a ring. The ring is initialized such that only one I-module contains 
the token, marking the next available empty register stage. Since the Write-request signal, 
carried on wire W r , is connected to all I-modules, an important timing restriction is that 
the token should not be passed on to the next module in the ring if the Write-request 
signal is still active. The Write-acknowledge on wire W a is the output of an OR gate 
(shown as a heavy bar with a + sign) whose inputs are acknowledge wires from all I- 
modules. Similarly, reading from the FIFO is controlled by an Output token ring, formed 
by connecting O-modules together. Data written into the linear queues ripple to their 
output side, ready to be gated onto the output bus. The Output ring is initialized such 
that only one O-module contains the token. This module then controls the timing and 
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signaling for gating of data to the output bus. The Read-request signal on wire R r is the 
output of an OR gate whose inputs are request wires from all O-modules. Another timing 
restriction exists for the Output token ring: since the Read- acknowledge signal, carried 
on wire Ra is broadcast to ail O-modules, the token should not be passed on to the next 
module while Read-acknowledge is still active. 

Our FIFO queue design makes use of distributed control structures and local com- 
munication. There are only a few types of modules in this design, with modules of each 
type replicated as necessary to construct complete FIFO queues. The distributed control 
structure allows the exploitation of concurrency. Concurrent read/ write supports a higher 
throughput rate. The FIFO queue is also completely data driven, hence no potential 
read/write conflict exists and there is no need for any arbiter. The distributed control 
organization of the FIFO lends itself naturally to a design using asynchronous, self-timed 
hardware modules. These control modules are specified using STGs and synthesized from 
such specifications. The Ring buffer which we fabricated is one with minimal latency 
(L = 1), with each of the linear queues containing exactly one stage. Registers in each 
stage have inputs connected to the input data bus, and outputs connected to the output 
data bus. 



1.6 Organization of thesis 



After the two introductory Chapters 1 and 2, this thesis is organized into three parts. 

Part I consists of Chapters 3-5, in which the basic theory of STGs is developed. This 
part gives an introduction to Petri net theory, discusses a number of relevant new results 
and shows how this theory is applied to STGs, a form of interpreted Petri nets. This is 
followed by an investigation of properties of speed-independent circuits, which translate 
to the properties of liveness and persistency in STGs. The material developed in this part 
allows the specification and synthesis of a basic type of speed-independent control circuit 
from STG specifications; these circuits can perform concurrent deterministic operation and 
(nondeterministic) input choices. 

Part II, consisting of Chapters 6 and 7, discusses a novel technique for decomposition 
of systems based on a notion called contraction. Here, the theoretical results for Petri nets 
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Figure 1.2: Block diagram of the Ring buffer. 
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are developed and then applied to STGs, as demonstrated through a design example. 

Part III, consisting of Chapters 8 and 9, discusses an extension to the basic STG model 
to allow the specification and synthesis of control circuits with data-dependent operation. 
The main ideas are presented informally in Chapter 8, together with an example. Chapter 
9 develops the formal theory for our extension. 

Chapter 2 contains a summary of the STG model and the main theoretical results of 
Parts I and II. This chapter gives a broad outline of the detailed description which follows 
in Chapters 3 to 6. It is intended to provide enough knowledge of our methodology for 
immediate applications. Chapter 7 contains a substantial design example which can be 
studied without having to go through the technical details presented in Chapters 3-6. 
Chapter 8 gives an informal presentation of the main idea of our extension of STGs to 
allow the specification of data-dependent circuits. Thus, after Chapters 2 and 7, Chapter 
8 can be read to provide an understanding of the extension. 

The following is a more detailed description of each chapter. 



Chapter 3. A number of new results are developed for a useful class of Petri nets called 
live-safe free-choice nets; they constitute the theoretical basis for further investigation of 
our STG model. First, relevant works in Petri nets theory are reviewed, with particular 
emphasis on the study of structure theory, which is mainly concerned with the relation- 
ship between the syntax (structure) and the underlying semantics of nets. This chapter 
develops two new results: (a) It is demonstrated that the behavior of a free-choice net, as 
characterized by its set of transition sequences, can be obtained by concurrently composing 
the behavior of its component subnets. As a consequence, an algorithm is devised, allowing 
the construction of finite automata directly from the structure of nets by composing finite 
automata of subnets, (b) A relation called the temporal relation on the set of transitions 
of a net is defined. This relation is characterized based on the structure of nets and it 
allows for the syntactic determination of whether two transitions are ordered, concurrent 
or in conflict. 



Chapter 4. The materials developed in Chapter 3 are part of a formal theory based 
on Petri nets, and they may be useful for other applications as well. For our purposes, 
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we interpret elements of nets as physical entities of digital circuits: transitions of nets 
are identified with rising and falling transitions of signals in circuits — hence the name 
Signal Transition Graphs. In this chapter, we introduce the STG model, its syntax and 
semantics, and our design approach for direct synthesis based on STGs. We introduce 
state graphs and their properties related to physical switching circuits. The third concept 
in this chapter is network functions, defined as the sets of logic functions describing the 
operation of the circuits. Network functions can be determined directly from state graphs. 
We also discuss state assignment, being the process of assigning binary values to states 
in a finite automaton to produce a state graph. Although this is a well-known difficult 
problem in the classical approach based on the Finite-State Machine (FSM) model, for 
STGs it is done automatically for STGs by satisfying certain syntactic conditions. 



Chapter 5. We discuss two important properties of state graphs and STGs called live- 
ness and persistency. Liveness is related to the continuous operation without deadlock of 
circuits; persistency is related to hazard-free operation of circuits. Persistency is strongly 
tied to the notion of speed-independence: a circuit is speed-independent iff its STG speci- 
fication is persistent. The equivalent syntactic characterization of liveness and persistency 
are developed for STGs. 



Chapter 6. A method of decomposition for nets called contraction is introduced. This al- 
lows the decomposition of state graphs through decomposition of their STGs. The purpose 
of decomposition of state graphs is to produce efficient implementations by minimizing the 
interaction between variables in the state graphs. While there exist only complex heuristic 
procedures for FSM approach, for STGs this can be carried easily using net contraction 
based on some structural information from the STGs. 



Chapter 7. This chapter concludes the second part of the thesis by providing a detailed 
design example of a self-timed controller for a successive-approximation A-to-D converter. 
We will go through the synthesis steps and illustrate the principles developed earlier. We 
also discuss a number of design choices available during certain steps of the synthesis 
process. 
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Chapter 8. Parts I and II of the thesis provide the ground work which allows one to 
specify circuit behavior in terms of STGs, obtain their state graphs and finally, produce 
a correct and efficient implementation by satisfying liveness and persistency. However, 
since STGs are based on free-choice nets, their expressive power is limited to that of 
free-choice nets. Since free-choice nets can specify concurrent operations and free-choices 
(nondeterministic choices), correspondingly, STGs can only specify concurrent operations 
and input choices (The reason for considering free choices in nets as input choices in STGs 
is that internally to a control circuit module, input choices appear nondeterministic.) In 
order to specify circuit operation with internal choices (data-dependent operation), one 
will need to rely on a more expressive class of Petri nets. 

In Chapter 8, we consider an extension to the STG model which allows the specification 
and synthesis of circuits with data-dependent operations. This extension marks a slight 
departure from net theory, as it is a notational extension in STG to represent an aspect of 
flow-control in state graphs, i.e., the ability to make a decision based on a priori knowledge 
when arriving at a state with conflicts. We discuss this extension and its semantics in 
terms of state graphs. Lastly, a design example of a two-cycle controller for first-in first- 
out (FIFO) circuits is presented. This controller is a data-dependent circuit which can 
perform concurrent control operations. 

Chapter 9. Chapter 9 describes an algorithm called expansion algorithm which allows 
the transformation of a STG specifying data-dependent operation into one which has only 
input choices. Another design example is given: the Resource Locking Module which is a 
part of the controller of the Router discussed earlier. 

Chapter 10. We discuss areas for further investigation with the aim toward a com- 
prehensive approach for automatically compiling self-timed VLSI systems from high-level 
descriptions. Another area of interest is that of optimization of asynchronous circuits based 
on particular implementation technologies and design methodologies. 



Chapter 2 

Signal Transition Graphs: An 
Informal Introduction 



This thesis presents an approach for the synthesis of self-timed control circuits from formal 
graph-theoretic specifications. The conventional approach consists of constructing a Finite 
State Machine (FSM) from some informal (e.g. textual) description and determining the 
logic equations for state and output variables from the FSM, as illustrated in the left 
branch of Fig. 2.1a. Unlike this approach, the basic idea of our approach can be described 
as follows. From an informal description, we construct a formal specification in terms of 
graphs called Signal Transition Graphs (STGs), a form of interpreted Petri nets. STGs can 
be considered as a higher level form of representation compared to FSMs in the following 
sense: from a STG, one can obtain a set of sequences of signal transitions which represent 
the behavior of a circuit; each transition in every sequence corresponds to a control event 
of a system. Under certain conditions, such a set of sequences forms a regular set, that is, 
it has an equivalent representation by a finite automaton. This finite automaton can be 
used as a basis for implementation, as illustrated in the right branch of Fig. 2.1a. Thus, 
STGs serve as a more abstract and succinct way of representing finite automata with 
certain desirable properties. STGs are more abstract because these representations use 
transitions and a binary relation called the causal relation between transitions to describe 
behavior; the concept of state does not appear explicitly. Because of this, concurrency and 
other control situations can be described in very compact form. STGs are more succinct 
because they do not require a large number of states to describe concurrent occurrences of 
control events, in contrast to the case of finite automata. 
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Figure 2.1: (a) Two approaches for synthesis of control circuits, (b) A technique for 
guaranteeing correctness of implementation from high level specifications. 



The finite automata derived from STGs are a form of interpreted finite automata called 
state graphs, in which states are interpreted as binary vectors of signal values and transi- 
tions between states as signal transitions. State graphs can capture fundamental properties 
of logic circuits— most importantly the deadlock-free and hazard-free properties. These 
correspond to the properties of liveness and persistency, respectively. Since at the higher 
level of representation of STGs, we do not deal with these low level issues directly, we 
need to develop some method to ensure correct implementation. Our strategy is as fol- 
lows: First, we study how fundamental properties of digital circuits can be characterized in 
terms of state graphs. Then, by establishing a unique correspondence between STGs and 
their state graph representations, these properties can be formalized as syntactic properties 
of STGs, which can in turns be verified and satisfied at this level of specification. Hence, 
by developing corresponding syntactic conditions for liveness and persistency for STGs, 
we have a means for ensuring the correctness of an implementation from an abstract level 
of specification. This idea is illustrated in Fig. 2.1b. 

Another basic notion of our approach is that of behavioral equivalence. Some of the 
previous approaches have used Petri nets not only as a specification but also as a direct 
basis for implementation, in the sense that the structure of a net is directly transferred to 
hardware. In constrast, we use nets only as a behavioral specification from which a set 
of transition sequences with certain properties can be derived. Thus nets are considered 
as language generating devices. Even though this idea has often been studied from the 
viewpoint of formal language theory, our concern is much more focused and limited to 
direct and practical applications. 
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This chapter gives an informal introduction to Petri net theory and summarizes a num- 
ber of new results, including a simple method for determining the set of transition sequences 
and its equivalent finite automaton directly from the structure of a net, and a syntactic 
characterization of the temporal relation between transitions in a net. These results can be 
applied to STGs as they are merely a form of interpreted Petri nets. The chapter describes 
properties of state graphs, liveness and persistency, and their equivalent characterization 
in STGs. Lastly, it presents a method of decomposition based on the notion of contraction; 
such a decomposition technique is the key to efficient implementation. 



2.1 Petri Nets and Signal Transition Graphs 
2.1.1 Petri nets 

A Petri net is a bipartite directed graph, consisting of a finite set of transitions T, a finite 
set of places P and a flow relation FCPxTUTxP specifying a binary relation between 
transitions and places. A net is shown in Fig. 2.2a, in which transitions are drawn as bars, 
places as circles, and the flow relation as directed arcs. One common restriction is that a 
net be strongly connected in the graph-theoretic sense. 

Transitions can usually be interpreted as certain events in a control system, while places 
as the local conditions which become true or cease to be true due to the occurrence of some 
actions, as specified by the flow relation. A transition has input and output places, e.g. 
P3,p 4 are input places of t 3 ; ps, pe its output places. Similarly, a place has input and output 
transitions, e.g. < x is the only input transition of pa, t 3 its only output transition. The net 
in Fig. 2.2a is a particular instance of an important subclass of nets called marked graphs, 
capable of describing systems with deterministic concurrent operation. 

A net as presented above describes the static structure of a control system. Its dynamic 
behavior is captured by its markings and the firing rule which transforms one marking to 
another. A marking M is a collection of places corresponding to the local conditions 
which hold at a particular moment; it is represented graphically as solid circles called 
tokens residing in these places. The initial marking is denoted as M ; in Fig. 2.2a, M 
corresponds to {pi,p2>. The firing rule is the rule for "executing" a net: A transition is 
enabled if each of its input places contains at least one token. An enabled transition may 
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Figure 2.2: (a) A Petri net and (b) its reachability graph, (c) A STG which is an interpreted 
net of the net in (a), and (d) its state graph, (e) A STG of a circuit with input choices 
and (f) its state graph. 
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occur or fire; its firing consumes one token from each input place and puts one token in 
each output place. In Fig. 2.2a, both transitions ti,t 2 are enabled in the initial marking 
Mo, the firing of <i moves the token from pi to pz, the firing of t 2 moves the token from p? 
top 4 . 

The result of the execution of the net can be described by a form of interpreted finite 
automata called reachability graphs, as shown in Fig. 2.2b. Each node represents a state 
corresponding to a marking of the net; a labeled arc between nodes indicates the transition 
from one marking to another due to the firing of an enabled transition. Also, the initial 
state (corresponding to the initial marking of the net) is circled. 

This example illustrates two important points. First, unlike the FSM model, nets can 
specify concurrent control actions: if two transitions are enabled in the same marking 
and the firing of one does not interfere with the enabling condition of the other, given 
enough time, both transitions will eventually fire. In Fig. 2.2a, the fact that <i and t 2 
are concurrent means that both transition sequences (or firing sequences) . . . t\t 2 . . . and 
. . . t 2 h . . . are possible; they show up in the reachability graph of the net. Secondly, the 
net's operation is totally asynchronous, as the firing of transitions depends solely on the 
availabity of tokens at their input places. 

We will stress the transition sequence semantics of nets: a net defines a set of transition 
sequences. For example, the set of sequences specified by the net in Fig. 2.2a can be given 
by a regular expression 

((*l||* 2 )<3(<4||* 5 )*6)*, 

where for transitions a and 6, a\\b (concurrent composition) denotes the set {ab, 6a}, ab 
(concatenation) denotes {ab} and a* (Kleene closure) denotes {c,a,aa, . . .}; e is the empty 
sequence. 

Properties of nets 

Two important behavioral properties of a net with an initial marking are safeness and 
liveness, defined as follows. For a net with an initial marking Mo, it is safe iff in any marking 
reachable from M , every place contains no more than one token. For our purpose, only 
finite safe nets are of practical interest. A finite safe net is live iff its reachability graph is 
strongly connected and each transition in T is enabled in some marking of the reachability 
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Figure 2.3: (a) An unsafe net and (b) its reachability graph. 

graph. Note that this restrictive notion of liveness applies only to finite safe nets, and 
further it requires that all markings be reproducible. 1 The purpose of this requirement is 
to permit one to disregard the transient behavior during initialization of nets. 

We consider safeness as a fundamental restriction on nets; without it one cannot relate 
the structure of a net to the actual behavior which the net intends to describe. Fig. 2.3a is 
a simple example of an unsafe net, whose structure is intended to specify a choice between 
control actions <i and t 2 . This would have been the case had place pi contained only one 
token. However, due to the fact that place pi contains two tokens, <i and t 2 each can fire 
twice consecutively, or both of them can fire concurrently. This behavior is recorded in 
the reachability graph shown in Fig.2.3b, with each marking described by a multiset of 
marked places (instead of a set) due to the multiplicity of tokens in the places. 

Unsafe nets create another fundamental problem in that the set of transition sequences 
derived from an unsafe net may not have an equivalent finite automata (FA) representation 
in case the number of tokens in any place grows without bound. 



Subclasses of nets and Structure theory 

We will be concerned with three important subclasses of nets called marked graphs (MG), 
state machines (SM) and free-choice (FC) nets. A marked graph is a net in which each 
place has at most one input transition and at most one output transition. Marked graphs 
represent the structure of deterministic concurrent systems. The dual notion of marked 
graphs is that of state machines. A state machine is a net in which each transition has 
at most one input place and at most one output place. State machines represent the 



1 In Fig. 2.4a, the initial marking {pi,P4} is a live-safe one; however, this marking is not reproducible. 
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Figure 2.4: (a) A LSFC net, (b) its MG-components resulting from MG-reductions and 
(c) its SM-components resulting from SM-reductions. 



structure of nondeterministic sequential systems. A free-choice net is a net such that if 
any two transitions t\ and t% share the same input place p, then p is the unique input place 
of both ti and t 2 . Examples are shown in Fig. 2.4, where (a) is a FC net, (b) consists of 
marked graphs and (c) of state machines. We will restrict ourselves to a subclass of FC 
Petri nets as specifications of control systems which exhibit concurrent operations. FC 
nets represent an appropriate blend of concurrency and choice in specifying behaviors of 
circuits, and at the same time can be analyzed without much difficulty. 

Structure theory is a branch of net theory which emphasizes the relationship between 
the structure (syntax) of nets and their behavior (semantics). In our view, structure theory 
is vital to the practical use of nets, for it allows the characterization of dynamic properties 
of nets in terms of static (syntactic) ones. Hack [24] has devised a reduction algorithm 
which allows the decomposition of a free-choice net into sets of structural components: 
a FC net can be decomposed into a set of state-machine (SM) components or a set of 
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marked graph (MG) components, as shown in Fig. 2.4. An important theorem developed 
by Hack which is the cornerstone of the structure theory of Petri nets can be informally 
stated as follows. If a FC net is live and safe, then the set of MG-components resulting 
from MG-reductions covers the net. Alternatively, the set of SM-components resulting 
from SM-reductions also covers the net. On the other hand, if a FC net is either nonlive 
or unsafe, then some reduction does not cover the net or is empty, or some component is 
not strongly connected. For example, the FC net in Fig.2.4 is live-safe and its SM-and 
MG-components both cover the net. 

Hence, by using this theorem, we can determine if a net is live-safe by decomposing 
it into structural components. Later chapters describe more fully other important appli- 
cations of this theorem. Specifically, by using Hack's theorem, we developed techniques 
for constructing a finite automaton directly from the structure of a net, and a syntactic 
characterization of the temporal relation, as will be described below. 



2.1.2 Signal Transition Graphs 

For the purpose of specifying behaviors of digital control circuits, we use a form of inter- 
preted Petri nets called Signal Transition Graphs (STGs), which are nets with transitions 
interpreted as rising and falling transitions of signals of a control circuit. Fig. 2.4c shows 
an example of a STG of a circuit with the set of signals denoted by J = {a, 6, c}. This STG 
is one interpretation of the net in Fig. 2.2a, where the set of transitions T is interpreted 
as the set of signal transitions J x {+, -}. Since a control circuit has input, internal and 
output signals, we partition the set of signal transitions in the same way, and in the graph- 
ical representation, transitions of input signals are underlined. The fundamental difference 
between transitions of input and non-input (= internal + output) signals is that the former 
are caused by the external environment while the latter by the system. 

For simplicity, in a STG, we represent each transition by its name instead of using a 
bar with a label. Another important graphical abbreviation for STGs is that every place 
with one input and one output transition is not drawn explicitly; instead an arc is drawn 
directly between these transitions. Such an arc directly represents an instance of the causal 
relation, denoted by R, between transitions; informally, tiRt 2 (read * x causes t 2 ) can be 
understood as: the firing of <i brings the system into a state (marking) in which t 2 is 
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enabled (and hence may fire). 

The reason for using the causal relation and ignoring places with one input and one 
output transitions is that, from the viewpoint of firing sequence semantics, the behavior of 
a net (or STG) is adequately defined by its set of transition sequences. For a sufficiently 
expressive class of nets called live-safe free-choice (LSFC) nets, we will be able to show that 
their sets of firing sequences are regular in the sense that the latter have equivalent finite 
automata representations. For example, the STG in Fig. 2.2c defines a set of sequences 
which has the equivalent finite automaton (FA) shown in Fig. 2. 2d, which is isomorphic 
to the reachability graph of Fig. 2.2b. This FA can be interpreted into a state graph by 
(i) identifying transitions between states with signal transitions and (ii) assigning binary 
vectors representing the values of signals in the circuit to nodes. For state graphs, this 
state assignment is very simple and can be carried out mechanically, as will be described 
later. 

The STG in Fig. 2.2c specifies the behavior of a control circuit with deterministic 
concurrent operation. Fig. 2.2e shows another STG specification of a trivial circuit with 
input choices] its state graph is shown in Fig. 2.2f. The input choice is specified by a 
place with two output transitions a+ and 6 + , which are transitions of input signals a and 
b. Whenever p is marked, then both output transitions are enabled and one is chosen 
nondeterministically to fire; its firing will disable the other transition. In Petri nets, such a 
situation is called a free choice. In STGs, we limit output transitions of a free-choice place 
to those of input signals because internal to a system, a choice made externally would 
appear as if it is nondeterministic. 

We have the following important remarks concerning the formalization of STGs as 
interpreted Petri nets. 

First, STGs are nets with interpreted transitions but places have no interpretation; in 
particular, we do not interpret places as states of signals resulting from the firing of signal 
transitions. The reason is illustrated in the following example. In Fig. 2.2a, transition ti 
is interpreted as a + . Suppose further that its output place p$ is interpreted as signal a 
becoming a logical "1". Then whenever t t fires, indicating a positive transition of a, place 
pz is marked with a token indicating that signal a has become 1. Note, however, than 
when t 3 fires subsequently, this token is taken away, implying that signal a is no longer at 
value 1. In reality this is not true because the value of a will not change until a_ occurs. 



2.1. PETRI NETS AND SIGNAL TRANSITION GRAPHS 25 

This is an important observation to which we shall return later. 

Second, despite the fact that STGs are interpreted nets, we have chosen to call our graph 
model Signal Transition Graphs, rather than Nets, in order to emphasize the important role 
of the static structure of nets in our application. A Petri net can be viewed as consisting of 
an underlying structure which is a graph, and a marking which indicates the distribution 
of tokens in the graph at some moment. Structure theory, as mentioned earlier, allows 
the direct association of static net structures to their underlying semantics. This thesis 
develops a number of techniques for manipulating the structure of nets (with little concerns 
about markings) which allow direct synthesis of the underlying finite automata. 

2.1.3 Relation between Petri nets and Signal Transition Graphs 

It is important to note that STGs can be considered simply as a class of LSFC nets with 
certain structural restrictions due to the interpretation of transitions. One such restriction 
is that STGs always contain an even number of transitions due to the fact that associated 
with every signal is a pair of signal transitions. Another restriction arises from the need 
to simulate the interface behavior of a control circuit: in a STG, if t is a transition of an 
input signal, then we require that t have exactly one transition, say t', which causes it: 
t'Rt; furthermore, H must be a transition of an output signal. In Fig. 2.2c, each transition 
of input signals a, b is caused by exactly one transition of output signal c. There are other 
restrictions which we will present later. 

Just as a STG is an interpreted net, its state graph is an interpreted FA which can 
be obtained in a similar fashion as reachability graphs. The relationship between nets, 
STGs and state graphs is depicted in Fig. 2.5. The top part of this figure is a syntactic or 
structural classification of nets. For instance, the class of FC nets is a subset of the class 
of Petri nets, and so on. LSFC nets are a subclass of FC nets, with the properties of live- 
safeness characterized structurally by Hack's reduction theorem mentioned at the end of 
Section 2.1.1. STGs constitute a subclass of LSFC nets. The subset of live-persistent STGs 
corresponds to those STGs whose state graphs are live and persistent. Live and persistent 
state graphs can be transformed into deadlock-free and hazard-free (speed-independent) 
logic circuits, as indicated by arrow (5). 

The middle part of Fig. 2.5 contains classes of finite automata, which can be considered 
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Figure 2.5: Structural classification of classes of nets and their equivalent finite automata. 
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as the low-level semantics of nets. The two-headed arrows indicate the equivalence between 
them and classes of nets. Earlier, we stated that safe nets have equivalent FA representa- 
tions; such an equivalence is indicated by arrow (1) for finite safe FC nets. The class of 
LSFC nets have equivalent FA which are live, as indicated by arrow (2), this equivalence 
is the subject of investigation of Section 2. Of main interest in Fig. 2.5 is the equivalence 
indicated by arrow (4) between live-persistent STGs and state graphs; this equivalence is 
studied in Section 3. 

It is crucial to realize that while safeness can be considered purely as a net-syntactic 
property, liveness and persistency are defined as properties of finite automata. Thus, live- 
safe FC nets are safe FC nets whose FA are live; similarly, live-persistent STGs are STGs 
whose state graphs are live and persistent. The important point is that even though liveness 
and persistency are denned as properties of state graphs, one can derive the equivalent 
syntactic conditions for STGs, just as in the case of LSFC nets. For LSFC nets, the 
syntactic conditions for live and safeness are stated in Hack's decomposition theorem. 



2.2 Semantics of nets/Behavioral equivalence 

There are two approaches to denning the semantics of Petri nets: one based on sequences 
of transitions (firing sequences), the other on partial orders of transitions and places. For 
safe nets, their semantics can be given both in terms of firing sequences and partial orders: 
By using the firing rule and an initial marking, one can simulate the operation of a Petri 
net to obtain the firing sequences; on the other hand, Petri nets can be unfolded into 
partial orders called processes [23]. 

We will be mainly interested in the firing sequence semantics of Petri nets. One fre- 
quently cited problem with using firing sequence semantics is illustrated in the following: 
Given a set of firing sequences describing the behavior of a very simple system {ab, ba} 
(Fig. 2.6a), it is unclear whether this set corresponds to a net in which a and 6 are con- 
current (Fig. 2.6b) or in conflict (Fig. 2.6c), where all transitions are labeled. 

It is clear that this problem arises due to the labeling of two transitions with the same 
labels in Fig. 2.6c. If such a labeling is disallowed, problems of this kind will never arise 
and the system {a6, 6a} always corresponds to the case of concurrency. Hence we allow 
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Figure 2.6: (a) The equivalent FA of the set {ab, ba} and two interpretations: (b) con- 
currency, where 7(<!) = a, j(t 2 ) = b; 7 is a labeling function, (c) conflict, where 
7(*i) = 7(*4) = a, 7 (< 2 ) = 7 (t 3 ) = b. 

only unlabeled transition sequences. In the formulation of STGs, instead of using a labeling 
function to label transitions of a net with signal transitions, i.e. 7 : T — ► J x {+, — }, we 
have chosen to make a direct interpretation: T = J x {+, — } to avoid the problem just 
mentioned. 



2.2.1 Behavioral Equivalence 

For our purpose of synthesis from net specifications, the main advantage of using sequence 
semantics is that it allows freedom in the implementation from a specification. Given a net 
specification of a control systems, any other net which exhibits the same set of transition 
sequences as the original one is considered equivalent to it; this is the notion of behavioral 
equivalence. The like notion of "structural equivalence" is not a particular useful one, as it 
requires two nets which are equivalent in this sense to have identical structures. The simple 
example in Fig. 2.7 shows two nets which are behavioral equivalent but not so structurally. 
If one is concerned only about the behavior (in terms of transition sequences), then the net 
in Fig. 2.7a contains a redundant place which can be removed without altering the net's 
behavior. 

From a technical point of view, sequence semantics are easier to handle than semantics 
based on processes. As will be made clear in this thesis, most results for LSFC nets 
are proven by considering their sets of transition sequences. These include important 
properties such as liveness, and properties concerning the composition and decomposition 
of nets. 
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(a) (b) 

Figure 2.7: Two nets which are behaviorally equivalent. 

2.2.2 Important Analytical Results for Nets 

In this section, we summarize a number of fundamental results which are proven in Chapter 
3. These results serve as the basis for later developments. One important result is the 
following 

The set of firing sequences of a LSFC net is regular, i.e. it has an equivalent 
finite automata representation. 

Algorithm for constructing finite automata for LSFC nets 

The above result is proven by demonstrating a procedure for constructing an equivalent 
automaton from a LSFC net; the basis for such a construction algorithm is given by the 
following result (Theorem 3.8): 

The equivalent finite automaton of a LSFC net is obtained by weaving (concurrent- 
composing) the finite automata of a set of SM-components which cover the net. 



Note that a FA equivalent to a state machine is identical to the state machine itself 
and hence, can be readily derived from the SM-components of a LSFC net. Let FS% and 
FS2 denote sets of transition sequences of two finite automata FAi and FA 2 , respectively. 
The weave of FSt and FS 2 is defined as (Def. 3.7) 

F5i||F5 2 = {ff£ (2i U T 2 y I <r\T x <= FS X A a\T 2 € FS 2 }, 
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Figure 2.8: (a) The set of covering SM-components for the net in Fig. 2.2a. (b) The 
equivalent FA of the SM-components and (c) their weave, which results in the equivalent 
FA of the net in Fig. 2.2a. 

where 7\ and T2 are sets of transitions of the FA; a [T,- denotes the projection of a sequence 
a onto the set T{. The weave of two FA, FAi||F^4 2> is denned as a FA whose set of 
transition sequences is given by FS1WFS2. 

The marked graph in Fig. 2.2a is a special case of LSFC nets, which can be decomposed 
into a set of covering SM-components (Fig. 2.8a), each being a simple cycle containing one 
token. The FA corresponding to these SM-components are shown in Fig. 2.8b; their weave 
results in the FA for the marked graph, as indicated in Fig. 2.8c. 



Temporal relation in LSFC nets 



Another result of fundamental importance developed in this thesis could be categorized 
as a result in the structure theory of Petri nets. Given a LSFC net, it is generally not 
possible to tell whether two transitions are ordered or concurrent merely by inspecting the 
structure of the net. For instance, the marked graph shown in Fig. 2.9 (called a necklace of 
length 4) has three different initial markings as indicated, each resulting in a distinct set of 
firing sequences; that is, this net has three equivalent classes of live-safe markings — every 
two markings in each class are mutually reachable. In case (a), the set of firing sequences 
is given by the expression (M2M4)*; m case (b), i* ^ (tiUhh)*] lastly in case (c), it is 
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Figure 2.9: (a) A FC net with three different equivalent classes of live-safe markings. Some 
of its SM-components contain two or three tokens. 

^((^lll^X^H^))*- In cases (a) and (b) all transitions are ordered, even though they are 
ordered in different ways. In case (c), t\ and t 3 are concurrent, and so are t? and < 4 . For 
each of these cases, there exists a set of covering SM-components which are simple cycles 
with one token. Note, however, that there are also cycles with two or three tokens. Since 
by definition a state machine net must contains exactly one token, such a cycle with two 
tokens is not a legitimate SM-component. 

In order to allow for syntactic characterization of the temporal relation between tran- 
sitions in a net, we shall make the following fundamental restriction. The original result 
by Hack, as described in his Well-formedness theorem, states that a FC net is live-safe iff 
when SM-reductions are applied to it (i) every SM-reduction is a collection of one or more 
marked SM-components and (ii) the reductions cover the net. Note that this condition 
does not require that every SM-component of the net contains one token each; it is possible 
for some SM-components to contain more than one token, as illustrated by the example 
above. 

Our temporal characterization based on syntax only works for nets which satisfy the 
one-token SM restriction: 

Every SM-component of a LSFC net contains exactly one token. 

Hence, if net satisfies this restriction, any of its SM-components containing more than 
one token is unsafe and will cause the net to be unsafe. In this thesis, we will be mainly 
interested in LSFC nets which meet this restriction. This is not as restrictive as it seems: 
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First, any LSFC nets not satisfying this restriction can visually be decomposed into subnets, 
each of which satifies it. Secondly, many other models of concurrent systems including CSP 
[25], path expressions [6], etc. require that every basic module be a sequential process — 
concurrency is achieved by having many sequential modules communicating with each 
other. In contrast, our one- token SM restriction does not require each basic module to be 
a sequential process. The advantages for introducing this restriction are: 

• It allows a simple and useful characterization of the temporal relation between tran- 
sitions based solely on the structure of the net. One example of this characterization 
is that two transitions are ordered iff they belong to the same simple cycle in a LSFC 
net. Such a characterization is correct only when every simple cycle contains exactly 
one token. 

• Each net in this class of nets has exactly one equivalence class of live-safe markings 
and furthermore, the equivalence class can be determined directly from the structure 
of the net. This has profound implications since in general, a LSFC net may have 
more than one equivalence class of live-safe markings if some of its SM-components 
contain more than one token (an example has been given in Fig. 2.9). The problem 
of determining all different classes of live-safe markings is a major difficulty in net 
theory [Hol74]. Moreover, if a net has only one equivalence class of markings, it is 
possible to determine all markings in this class directly from the structure of the 
net. Therefore, the concept of an initial marking serves merely as an indicator of 
the starting state of a net and plays no significant role in the synthesis from net 
specifications. 

Under the one token SM restriction to LSFC nets, we can define a relation called the 
temporal relation tr = T x T. The temporal relation is a binary relation on the set of 
transitions (and can be extended to include places) of a LSFC net, and is defined based 
on the structure of nets. It allows one to determine syntactically whether two transitions 
are ordered, concurrent or in conflict. 

In the following, we give the net-syntactic definition of symmetric binary relations 
li, co, cf and dc on the set of transitions; they stand for ordered, concurrent, conflict 
and direct- conflict, respectively. In a LSFC net, two transitions t and t' are (a) ordered, 
denoted as {£, t'} € li iff there exists a simple cycle containing both of them; (b) concurrent, 
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(a) 

Figure 2.10: Portion of a reachability graph showing t and t' are (a) in direct-conflict (b) 
concurrent (c) ordered or in indirect-conflict. 

denoted as {r, t'} £ co, iff there exists a MG-component containing both of them, but not 
in the same simple cycle; (c) otherwise, they are in conflict, denoted as {t, t'} G cf . One 
special case of conflicts is a direct conflict, denoted by {t, t'} € dc, iff there exists a place of 
which t and f are output transitions. For example, in Fig. 2.4, {tfi,^} € li, {h,t 6 } € co, 
{*2,*3} € cf and {h,t 2 } € dc. 

The above classifications of the temporal relation are based on the syntax of LSFC 
nets. It can be proven that these correspond to the normal understanding of ordering, 
concurrency and conflict in terms of firing sequences. For a LSFC net, there exists a cor- 
respondence between an element of the temporal relation and a situation in a reachability 
graph of the net, as illustrated in Fig. 2.10. In this figure, dotted arcs are used to indi- 
cate explicitly those transitions which cannot occur; dashed arcs indicate directed paths 
between markings. 

Another result concerning this syntactic characterization is the following. In a LSFC 
net satisfying the one-token SM restriction, if we define the temporal relation on the set of 
transitions as tr = T x T, then it can be shown that (Theorem 3.16): 

li, co and cf partition the temporal relation tr into disjoint subsets, and tr = 
li U co U cf . 

The above syntactic characterization plays an effective and complementary role to the 
construction algorithm developed earlier: In a net, while the temporal relation allows the 
syntactic characterization of a behavior specification (i.e. whether certain control events 
are concurrent or in conflict, etc.), the finite automaton obtained from the net provides 
the basis for further analysis and synthesis. Hence, we have introduced enough analytical 
results to permit the use of nets as formal specifications of control systems, which can be 
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viewed as high level representations of finite automata for the purpose of implementation. 

2.3 Properties of State graphs 

In this section, we briefly discuss interpreted finite automata called state graphs and their 
logic implementations, as described by network functions. A network function is simply 
a set of logic equations for non-input signals in a circuit, and it can be obtained directly 
from a state graph. 

We will further explore two important properties of state graphs called liveness and 
■persistency and derive corresponding conditions on STGs. As mentioned earlier, these 
will appear as syntactic conditions on STGs, and by satisfying them, correct hardware 
implementation is guaranteed: simply, a control circuit is deadlock-free and hazard-free if 
its STG specification is live and persistent. 

2.3.1 State Graphs and Network Functions 

In the construction of an equivalent FA from a set of sequences, a state is an abstract 
concept, defined as an equivalence class of sequences with the same postfixes; there is no 
apparent relationship between a state and the transitions enabled in it. However, for state 
graphs obtained from a STG, not only do we require that it be a FA equivalent to the set 
of sequences defined by a STG, but we also require that states be interpreted as binary 
vectors representing the values of signals in a circuit. There is a direct connection between 
states and transitions: states are vectors of values of a set of signals, whereas transitions 
are transitions of the same set of signals. For example, in Fig. 2.2d, the control circuit 
is comprised of the set of signals J = {a,b,c}. Hence in its state graph, every state is 
interpreted as a binary vector representing the values of signals in the ordered set (a, 6, c) 
and every transition is a signal transition in J x {+>— }. Such a connection requires that 
every state s be assigned values in a manner consistent with transitions from s. For a signal 
j G J, let s(j) denote the binary value of signal j in state s, and j m denote a transition of 
j (either j + or j_). Also let s[t)s' assert that the occurrence of transition t in a state s 
takes the system to another state s'; t is said to be enabled in state s. In a state graph, if 
s[t)s' where t = j m , then s, s' and t must together satisfy the following condition: if t = j + 
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then a(j) = 0, s'(j) = 1; if t = j- then s( j) = 1, s'(j) = 0. In which case, the triple (s, t, s') 
is called consistent, and s, s' are adjacent. For example, in Fig. 2. 2d, s = 000, t = b + and 
s' = 010. 

A state graph is said to have a consistent state assignment iff the above condition holds 
for all states in the state graph. A state graph has a corresponding logic implementa- 
tion described by a network function which can be determined from the state graph. A 
network function consists of a set of logic equations, one for each non-input signals to be 
implemented. 

In a state graph, the logic equation for every non-input signal j can be determined as 
follows. For states s, s' and transition t such that s[t)s', s' is called a next-state of s. For a 
signal j, its implied value in state s, denoted by f(s,j), is determined by: if t is a transition 
of signal j, i.e. t = j m , then f(s,j) — s(j); otherwise f(s,j) = s(j), where s(j) denotes the 
complement of s(j). Notice that in a state graph, it is often the case that a state s has 
more than one next-states s'; however, each state can have exactly one implied value. The 
logic equation for j is determined from the set of implied values of j in all states. This 
can be done conveniently by transferring the state graph to a Karnaugh map (K-map) 
such that in a square of the K-map corresponding to some state s, the implied value of s 
is written. For example, to determine the logic equation for signal c, the state graph in 
Fig. 2.2d can be transferred to a K-map; and it can be verified easily that c = a.b + c(a + b). 
This is illustrated in Fig. 2.2g, and the logic function is precisely that of a C-element. 



2.3.2 Liveness and Consistent State Assignment 

In the process of obtaining a state graph from an STG, we first determine the equivalent 
FA of the STG and then perform state assignment for the FA. Performing state assign- 
ment is essentially interpreting the FA. In the last section, the concept of consistent state 
assignments has been described. It follows that in every simple cycle of a state graph with 
consistent state assignment, the numbers of t and i transitions must be equal, and t, t must 
alternate; where t , i denote a pair of complementary signal transitions. We have derived 
the following corresponding condition on a STG for its state graph to have a consistent 
state assignment (Theorem 4.8). 
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A state graph of a STG has a consistent state assignment iff every pair of 
transitions t, i is ordered. 

The continual operation without deadlocking of control systems is the property of 
liveness. A state graph of a control system is called live iff its uninterpreted FA is strongly 
connected and has a consistent state assignment. If the state graph is strongly connected 
then all of its transitions occur infinitely often in some transition sequences. 

A STG is said to be live iff its state graph is live. The syntactic conditions on a STG 
so that its state graph is live are the following. (Theorem 5.1) 

A STG is live iff (i) its uninterpreted net is a LSFC net, and (ii) every pair of 
transitions t,t is ordered. 

Condition (i) guarantees that the FA is strongly connected; condition (ii) guarantees that 
the interpreted FA (i.e. the state graph) has a consistent state assignment. Recall that a 
strongly connected FA is said to be live. An example of a live STG and its state graph are 
given in Fig. 2.2 above. 

2.3.3 Persistency- 
Persistency is one of the most important properties of state graphs. Persistency is an 
important concept because it is the essential property of speed-independent circuits. It 
is also the most complicated to deal with because there may be a number of mechanisms 
involved. 

In a state graph, a transition is persistent iff when it is enabled, the occurrence of some 
other transition does not disable it. This situation is illustrated in Fig. 2.11a: transitions 
t and u are enabled in state s and sft)^, 5[u)5 2 - t is persistent, as the occurrence of u 
does not disable it. On the other hand, u is non-persistent because it is disabled by an 
occurrence of t and hence not enabled in si. The disabling of u must have been caused by 
the occurrence of transition t, as t is the only transition which occurs in going from state 
s to si. In which case, t must be a transition of an input to a logic element of which u is 
a transition of its output signal. 
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Figure 2.11: (a) A non-persistent state graph and (b) its corresponding STG. (c) By adding 
a persistency constraint, non-persistency can be eliminated from the state graph (d). (e) 
To maintain the concurrency between u and *, an internal transition x can be introduced. 



We have developed the corresponding syntactic characterization on STG for non- 
persistency, as illustrated for a live STG in Fig. 2.11b: (Theorem 5.4) 



In the state graph (Fig. 2.11a), transition u is non-persistent iff in the corre- 
sponding STG, t, u are concurrent and tRu. 

This can be appreciated by considering the corresponding hardware implementation: 
the course of action iRu is implemented by a hardware element with i as one of its input 
transitions and u is a transition of its output signal. Concurrency between t and u implies 
that while the hardware element is reacting to i to cause u, t may be occurring simultane- 
ously at the input of that hardware element. This is commonly known as a race condition 
in hardware circuits and can lead to malfunction. 

A persistency constraint is an ordering constraint between two transitions, namely from 
u to t as illustrated in Fig. 2.11c, used for eliminating this non-persistent behavior. The 
resulting state graph in Fig. 2. lid is persistent. 

A general condition of our design methodology is that transitions of input signals to 
the system are always assumed to be persistent. The reason for this assumption is that 
even if two transitions of input signals appear to be enabled in the same state, in the larger 
system comprising the original system and its environment, they may indeed be enabled 
in different states. 
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A STG is said to be persistent iff its state graph is persistent. Hence, 

A STG is persistent iff for every non-input signal j, every transition of j caused 
by a transition x is ordered with x. 

A remark about Persistency. 

Earlier, when introducing STGs as a form of interpreted Petri nets, we mentioned a reason 
why places are not interpreted as states of signals. This is indeed a fundamental limitation 
of our attempt to use LSFC nets to model behavior of logic circuits. As a matter of fact, 
STGs cannot model circuits which have hazards because these circuits correspond to non- 
persistent STGs. Consider the STG in Fig. 2.11b. Without a persistency constraint from 
u to t (as indicated in Fig. 2.11c), the following problem would arise. After transition i 
fires, each of its output places (not shown) gets a token. Since u and t are concurrent, the 
token on the left branch may move to the input place of t while u has not fired. Since t 
and t are transitions of the same signal (say j), what should really happen when t fires 
subsequently is that the token at the input place of u also disappears. This is because the 
presence of this token should be used to indicate the state of signal j after t fires. Since t 
has fired, changing the state of j again, this token must disappear. 

It is clear that such a disappearing token is not allowed by the firing rule of Petri nets. 
Hence in order not to have to deal with this problem, we require that all transitions in 
a net (except those of input signals) satisfy the persistent constraint. The ramification 
of this restriction is that STGs cannot model arbiters and similar circuits with hazards. 
Note, however, that this does not include circuits with input choices which can still be 
specified by STGs (as illustrated by Fig. 2.2e). Hence, an arbitration can always be turned 
into an input choice by using an external arbiter. 

2.3.4 A synthesis procedure 

The following synthesis procedure summarizes the ideas discussed so far. From a textual 
description of a control circuit, we perform the following steps. 

(1) Construct a STG specification according to the description. 
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(2) Check the syntax of the STG for liveness. 

(3) Check the syntax of the STG for persistency. (If non-persistency exists, eliminate it 
by adding persistency constraints and/or additional internal signals.) 

(4) Check the syntax of the STG for state assignment problems. 

(5) Derive the equivalent FA of the STG and perform state assignment to produce a state 
graph. (If the STG is live then its state graph has a consistent state assignment.) 

(6) Determine the network function from the state graph. 

The logic circuit is simply the realization of the network function. The phase of trans- 
forming a live-persistent STG into a logic circuit can be done mechanically. However, 
transforming an initial STG specification into a live-persistent one may require interac- 
tions with the designer. Even though checking for liveness and persistency of STGs can be 
performed by simply checking the syntax of STGs, there is usually more than one way to 
eliminate deadlocks and non-persistency. For example, non-persistency in Fig 2.11b can be 
eliminated either (i) by adding a persistency constraint directly to the STG (Fig. 2. lid) 
or (ii) by first introducing an internal transition x and then adding the persistency con- 
straint. In case (i), concurrency in the specification is reduced, thus reducing the number 
of transition sequences allowed. In the second case, concurrency is maintained at the cost 
of introducing more signal transitions (and hence more hardware). Whichever choice is 
better — limited concurrency vs. external behavioral equivalence — is to be decided by the 
designer. 

We caution the reader that step (4) is another possible mechanism which may cause 
non-persistency in the state graph; it is a by-product of the state assignment process and 
has no relation to the sequencing specification of a STG. Nonetheless, we still can establish 
a syntactic characterization of this problem for STGs, as presented in Chapter 5. In Section 

2.5, we present an example of this problem and discuss its implications. 

2.4 Decomposition by Net Contraction 

The above synthesis procedure simply consists of going from a live-persistent STG to a 
state graph then to a logic implementation. There is a simple method for decomposing 
the state graph into smaller subgraphs, from which an efficient implementation can be 
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obtained. This decomposition technique is based on a graph-theoretic operation called 
contraction. The general strategy is illustrated in Fig. 2.12 which shows the steps for the 
synthesis of a trigger module, a control module for implementing pipelined operation of a 
processign system. 

The STG specification of this module (Fig. 2.12a) satisfies the syntactic properties of 
liveness and persistency. Its state graph is shown in Fig. 2.12b, from which an implementa- 
tion can be obtained (Fig. 2.12e). This path a-b— e adheres to the synthesis steps described 
previously, where no decomposition is used. The alternate path a-c-d-e demonstrates our 
decomposition technique, as described below. 

First, for each signal to be implemented in {!„, O r }, a contracted net is determined for 
it, as shown in Fig. 2.12c. In the STG, transitions of signal I a are caused by transitions 
of signals J r and O r , but not O a . Thus in the contracted net of J , transitions of 0„ 
can be eliminated. Besides transitions of signal I„, the contracted net of I a only contains 
transitions of signals which cause transitions of I a in the original STG. These signals 
{I r ,O r } form the input set of I a , denoted as I(I a )- In the implementation (Fig. 2.12e), 
signals in this set are input signals to the logic element I„. A contracted net is obtained 
by removing unwanted transitions from the original STG, in such a way that the temporal 
relation between remaining transitions is preserved. The left STG in Fig. 2.12c is the 
contracted net of J a , obtained by removing transitions of signal o ; similarly, the right 
STG is the contracted net of O r , obtained by removing transitions of signal I r . The 
dashed arcs in the contracted nets of (c) indicate redundant causal constraints which can 
be removed. 

It is important to note that in the contracted net of a signal j, only transitions of j are 
considered as output, other transitions in the input set of j, I(j), are considered as inputs 
to the logic element j. The implication is that since transitions in I(j) are inputs, they 
are persistent. Their persistency must be guaranteed by other part of the circuit which 
has its own corresponding contracted net. 

Using exactly the same technique as before, each contracted net produces a state graph 
from which the logic equation for a signal can be determined. In this example, the final 
hardware circuits are the same whether decomposition is used or not. However, in general, 
the circuit obtained from decomposition is usually more efficient. 
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The dashed arrows from (a) to (c) and from (b) to (d) indicate net contractions and 
state graph contractions, respectively. The arrows from (b) to (d) indicate the fundamental 
reason this technique of decomposition yields a logic circuit with the same behavior as 
one obtained without decomposition: state graphs obtained from the contracted nets are 
themselves contracted versions of the state graph in (b). A contracted state graph is 
obtained by simply "ignoring" the uninteresting transitions. 

The major net-theoretic results which serve as the basis of this decomposition technique 
are the following (Fig. 2.13a). Let E denote a LSFC net satisfying the one-token SM 
restriction, and $ its equivalent FA. Let {EJ, . . . , £(,} be a set of contracted nets of E such 
that each EJ contains a subset T< C T, where T is the set of transitions of E. A contraction 
preserves the temporal relation if two transitions which are ordered (concurrent, in conflict) 
in the original STG remain so in the contracted net. For each EJ, let $J be its equivalent 
FA. Then (Theorem 6.11) 



If the contractions preserve the temporal relation, then every $(■ is a contracted 
state graph o/$. 



The state graphs in {$J, . . . , $(J form a collection of concurrently operating state ma- 
chines. The aggregate behavior of this collection is defined as the concurrent composition 
of all components, obtained by weaving them: $i|| . . . ||$J,. 

The following result establishes the behavioral equivalence between the LSFC net and 
its set of contracted nets. (Theorem 6.12) 



If the causal relation of every pair of transitions in E (i. e. Vi, t' £ T : tRtf) is 
present in some contracted net, then $ and $i|| . . . 11$^ ore identical. 



Since STGs are a syntactic subclass of LSFC nets, the above result can be applied 
directly to STGs, as indicated by Fig. 2.13b. The logic circuits obtained by two methods 
are equivalent in the sense that they have the same behavior, as expressed in terms of sets 
of transition sequences. 



42 



CHAPTER 2. AN INFORMAL INTRODUCTION 



(a) ir+ 




Ir_ 
la 



Or 
Oa 



I **~ r, j r,_ 

» remove » % it-t,it 



w 



Figure 2.12: (a) STG specification of a trigger module. The final implementation can 
be obtained through the normal path a-b-e, or through decomposition by contraction 
a-c-d-e. 
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Figure 2.13: (a) The equivalent FA of contracted nets are identical to the contraction of 
the original FA. (b) Application of the result in (a) to STGs. 



A remark about contraction vs. reduction 

Earlier in this chapter, we mentioned Hack's reduction algorithm which, when applied to 
a LSFC net, produces a set of MG-components or SM-components. In addition, we have 
shown that the equivalent FA of a LSFC net can be obtained by weaving the equivalent 
FA of a set of covering SM-components. 

The result stated above for net contraction indicates that the equivalent FA of a LSFC 
net can also be obtained by weaving the equivalent FA of a set of contracted nets which 
"cover" the original STG (in the sense defined above). 

The main difference between these two methods of decomposition is that in reduction, 
a net is decomposed into subnets which are either state machines or marked graphs, while 
in contraction, subnets are not necessarily required to be state machines or marked graphs, 
even though it is possible. Subnets resulting from net contractions can be anything, de- 
pending on which transitions are eliminated. In fact, reduction can be considered as a 
special case of contraction: in a SM- (MG-) reduction, the set of transitions which remain 
all belong to the same SM- (MG-) component; by using contraction to eliminate other 
transitions, the desired SM- (MG-) component can be obtained. Note, however, that the 
contraction technique proposed only works for LSFC nets which satisfy the one-token SM 
restriction. 
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2.5 A problem with state assignment 

Previously, we discussed conditions under which a STG has a consistent state assignment. 
Below, we will use an example to illustrate a side-effect of state assignment which can some- 
times give rise to non-persistency in state graphs. In contrast, the kind of non-persistency 
which we described earlier is a result of the interaction between concurrent signal transi- 
tions, and therefore, it is directly related to the sequencing requirement specified by an 
STG. Thus, even though both phenomena may give rise to non-persistency in state graphs, 
their mechanisms are completely different. We will call this the state assignment problem 
and the other non-persistency in STGs to distinguish them. 

Fig. 2.14a is a STG, being a simple cycle <ii?< 2 • • • Rt n Rti, with an initial marking M in 
which place (< n , <i) is marked. Its equivalent FA (Fig. 2.14b) is a simple cycle, represented 
by the sequence so[ti)5i[<2) • • • s„_i[£„).so. Suppose that there exists some transition £,-, 1 < 
i < n, such that the set B = {ti, t 2 ,..., <,} has the property that VxET:x£B<&xEB, 
i.e. B forms a subset which contains both the rising and falling transitions of a number of 
signals. Such a set is called a complementary set. 

Then when state assignment is carried out, states s and 5 t - will have the same binary 
representation (Fig. 2.14c). This is because if any transition tj in B occurs, then tj must 
also have occurred. Thus in the state graph, both t\ and tf; +1 are enabled in the same state 
and hence, are in direct conflict. There are two cases: 

(a) If both t x and ij +1 are transitions of input signals, then they are persistent. (This is 
due to the previous assumption that external transitions be persistent.) 

(b) If either t\ or U+i or both are transitions of non-input signals then non-persistency 
results. 

Case (b) above represents an undesirable situation and it cannot be fixed by a persistency 
constraint as discussed earlier. In order to eliminate this case of non-persistency, one has 
to introduce additional bit to the binary vectors to allow the distinction between states 
So and s,-. This means that it may be necessary to add another internal signal to the 
set of signals J. For example, one can insert a new signal transition x anywhere in the 
chain tiRt 2 . . . Rt n , thus ensuring that it no longer forms a complementary set. A specific 
example is given in Section 7.2.2 to illustrate this step. 
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(a) 




Figure 2.14: (a) A STG, (b) its equivalent FA and (c) the state graph resulting from state 
assignment. 

The above problem also applies to contracted nets of a STG. Even if a STG contains no 
complementary sets, in a contracted net, new complementary sets may be created when 
transitions are removed from the STG. In which case, one can use the same technique 
of introducing additional internal signal to eliminate non-persistency in a contracted net. 
Chapter 7 provides an example for this. 



2.6 Summary 



In this chapter, we have outlined an approach for synthesis of self-timed control circuits 
from STG specifications. While transforming a live-persistent STG into a logic circuit can 
be done mechanically, ensuring liveness and persistency of STGs is a more complex task 
which may require interactions with the designer. Nonetheless, these interactions only 
mean that there are usually more than one way to guarantee liveness and persistency and 
choosing the optimal solution is the task left to the designer. 

One added complication arises from our technique for decomposition which produces 
contracted nets from a STG. Of the three properties which one has to satisfy: liveness, 
persistency (of STG) and the state-assignment problem, we have proven in the thesis that 
(i) if liveness and persistency are met by a STG, then they are automatically met by its 
contracted nets, and (ii) even if a STG does not have any state-assignment problem, its 
contracted nets may due to the removal of transitions. 



Chapter 3 

Semantics and Temporal Relations of 

Nets 



Petri net theory constitutes one active area of research in the description, modeling and 
analysis of concurrent systems. Petri nets allow the modeling of sequential and non- 
sequential behaviors of systems by providing two distinct types of elements for representing 
states and transitions. Even though Petri nets are a powerful model of concurrent systems, 
their analysis is often difficult due to the generality allowed in these specifications. We 
will restrict ourselves to a subclass of Petri nets called Free-Choice (FC) nets and will 
use them as specifications of systems which exhibit concurrent operations. Free-Choice 
nets represent an appropriate blend of concurrency and choice in specifying behaviors of 
systems, and at the same time can be analyzed without much difficulty. 

In the previous chapter, we have argued for the use of firing sequence semantics of nets. 
This chapter provides the formal statements and proofs of the results presented earlier. 
Two new results described earlier for the class of LSFC nets are developed: (1) An al- 
gorithm for constructing a finite automaton directly from the structure of a net. Such a 
finite automaton corresponds precisely to the reachability graph of that net. (2) A charac- 
terization, based on the structure of a net, of a temporal relation on its set of transitions. 
The temporal relation can be partitioned into disjoint subsets of ordering, concurrency 
and conflict, each of which has a unique corresponding situation in the reachability graph. 

The rest of this chapter is organized as follows. Section 2 gives a brief introduction to 
Petri net theory and summarizes important and recent results. The structure and firing 
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rules of Petri nets are defined; important subclasses of nets called marked graphs, state 
machines and free choice nets are identified. Then a number of results for LSFC nets are 
summarized, from works of Hack, Best, Thiagarajan and Voss. These are refered to as the 
structure theory of LSFC nets, one based on the static structure of the nets rather than 
on their dynamic behaviors as described by the firing rule. 

Section 3 discusses a semantics of nets based on sets of firing sequences. We show that 
the set of firing sequences of a live safe free choice net can be determined directly from 
those of component state-machines by weaving them. This allows us to devise a simple 
algorithm for direct construction of the reachability graph from the structural components 
of a net. 

Section 4 defines a binary relation called temporal relation in terms of net syntax and 
discusses a number of important properties. We then establish one-to-one correspondence 
between subsets of this relation (ordering, concurrency and conflict) with unique situations 
in the reachability graph. 

3.1 Petri Nets 

3.1.1 A Brief Introduction 

This section provides a brief introduction to net theory. Most of the materials in this 
section are adapted from [24,41,44]. 

A Petri net is a triple JV = (P, T, F) where 

• P U T ^ and P n T = 0, and 

• F C (P x T) U (T x P) such that dom(F) U range(F) = P U T. 

P is the set of places, T is the set of transitions and P U T is the set of elements of N. 
The relation F is called the flow relation. In graphical representation, places are drawn as 
circles, transitions as bars and the flow relation as directed arcs. Let a; be an element of 
N, then 

• -x = {y e P U T | (y, x) € F} is the preset of a;, 
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• x- = {y G P U T | (x, y) G F} is the postset of z. 

For a place a:, -a; and a;- are often referred to as sets of input and output transitions of 
x, respectively. Similarly, for a transition a:, -a; and x- are often referred to as sets of input 
and output places of x, respectively. This dot notation is extended to sets of elements in 
the obvious way. If p G P and \p • | > 1 then p is called a shared place, where \X\ denotes 
the cardinality of set X. To facilitate the task of analysis and presentation, two common 
restrictions on a Petri net N = (P, T, F) are that it be pure and simple: 1 

• N is pure iff Vx,y G P U T : {x, y) G F => (y, x) $ F. 

• N is simple iff Va;,y G PUT : (-x = -y A a;- = y-) => x = y. Another related property 
is place-simple: Vx,y G P : (•£ = -y A a;- = y-) =>• x = y. 

In light of the fact that we are mostly interested in behavior of nets in terms of firing 
sequences, place-simplicity is a more reasonable restriction, whereas simplicity is a rather 
stringent requirement in that it disallows the specification of certain types of choices. In 
summary, all nets considered are tacitly assumed to satisfy the following restrictions, unless 
explicitly stated otherwise: 

Restriction 3.1 All nets considered are finite, strongly-connected, pure and place-simple. 

We will be mainly concerned with three important subclasses of nets called marked 
graphs (MG), state machines (SM) and free-choice (FC) nets. A marked graph is a net 
in which each place has at most one input transition and at most one output transition: 
Vp G P : | • p\, \p ■ | < 1. Marked graphs represent the structure of deterministic concurrent 
systems. The dual notion of marked graphs is that of state machines. A state machine 
is a net in which each transition has at most one input place and at most one output 
place: V<GT:|-£|,|<-|<1. State machines represent the structure of nondeterministic 
sequential systems. A free-choice net is a net such that if any two transitions t\ and t 2 
share the same input place p, i.e. \p • \ > 1, then p is the unique input place of both t\ and 
W- Vp G p : \p ■ | > 1 =*- •(]?•) = {p}. 



1 Note that this definition of "simple" is differently from Commoner's simple nets, which are called 
asymmetric-choice nets [44]. 
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The states of a system whose structure is modeled by a net are represented by markings. 
A marking of a net N is a function M : P —* {0, 1,2.. .}. In diagrams, the marking M 
is indicated by placing M(p) tokens (drawn as dots) on each place p. If a place contains 
tokens, it is marked, otherwise, it is blank. Function M is extended to sets of places such 
that M(P) = J2 P eP M(p). A transition t is enabled at the marking M iff each input place 
of t is marked at M, i.e. Vp E •£ : M(p) > 0. When the enabled transition t fires at M, a 
new marking M' is reached which is given by 



Vp E P : M\p) = < 



M(p) - 1 if p £ •* - t- 
M(p) + 1 if p 6 t ■ - • * 
M(p) otherwise 



The transformation of M into M' through the firing of t is denoted as M[t)M'. Let 
T* be the set of all finite-length sequences of symbols in T. Let M be a marking of the 
net N and a = <oM2 • • • t n € T* a sequence of transitions. Then <r is a firing sequence at 
M iff there exist markings Mi,M 2 , . . . ,M n+1 of JV such that Mj[t,-)Af,- + i for < i < n. 
As usual, Mo[<x)M„+i denotes the transformation of M into M n+ i by firing a at Mo. By 
convention, for every marking M of N, M[e)M, where e denotes the empty sequence. 

The forward marking class of a marking M of a net N is denoted as [M) and is the 
smallest class of markings of N given by: 

• M€ [M) and 

• if M' E [M> and for some teT: M'[t)M", then M" E \M). 

A net JV = (P,T,F) with an initial marking M is usually represented as a quadruple 
S = (P, T, F, M ). JV is called the underlying net of £ and usually denoted as JV S . 

Two important behavioral properties of a net with an initial marking are liveness and 
safety. 

Definition 3.2 Lei S = (P, T, F, M ) be a net with an initial marking M Q . Then 

• Em live iffVM' E [M ), V< E T : 3M" E (AT) such that t is enabled at M". 

• Em safe iffVM' E [M ),y P E P : M'(p) < 1. 
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3.1.2 Previous Results for Free-Choice nets 

Given a Petri net with an initial marking, the firing rule can be applied to transform the 
net from one marking into a new marking by firing enabled transitions in the net. The 
reachability graph is a graph in which nodes are markings and arcs between nodes represent 
firings of transitions; this graph is a state transition graph which readily captures the 
behavior of the net. Although for general Petri nets, reachability graphs can be obtained 
by exhaustively firing enabled transitions at a marking to produce new markings, for the 
class of FC nets, much can be deduced directly from their structure without reference to 
any particular initial marking, provided that the net is live and safe. In this section, we 
summarize a number of relevant results for FC nets. 

Reduction algorithms for Free-Choice nets. 

Hack [24] devised two simple algorithms for structurally reducing a free choice net into its 
component marked graphs or state machines. 

A marked graph allocation (MG allocation) over a free choice net N = {P, T, F) is a 
function A : P -> T such that Vp G P : A(p) € p-. Thus for every place in a net, only 
one of its output transitions is allocated, the rest are called unallocated transitions. Let 
E t and E p denote the sets of eliminated transitions and places, respectively. The marked 
graph reduction (MG reduction) algorithm involves the following steps. Vp € P, Vt 6 T : 

1. Delete all unallocated transitions: p- — {A(p)} C E t . 

2. Delete places with all input transitions already deleted: -p C E t <$■ p G E p . 

3. Delete transitions with at least one input place deleted: -tnEp^fy <& t £ E t . 

Repeat steps 2 and 3 until they are no longer applicable. A marked graph resulting from 
the reduction is called a MG- component. 

A state-machine allocation (SM allocation) over a free choice net N = {P, T,F) is a 
function B : T -* P such that V* € T : B(t) € -t. The state machine reduction (SM 
reduction) algorithm involves the following steps. Vp € P, Vi G T : 

1. Delete all unallocated places: -t — {£(*)} C E p . 
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(b) MG-componenU 



(c) SM-componenU 



Figure 3.1: (a) A LSFC net (b) Its MG components resulting from MG-reductions and (c) 
Its SM components resulting from SM-reductions. 

2. Delete transitions with all output places already deleted: t- C E p -O- t 6 E t . 

3. Delete places with at least one output transition deleted: p • f)E t =^ ■&■ p € E p . 

Repeat steps 2 and 3 until they are no longer applicable. A state machine resulting 
from the reduction is called a SM- component. An example (taken from [4]) of MG and SM 
reduction of a LSFC net is shown in Fig. 3.1. 



Useful results for Free-Choice nets. 



For FC nets, a number of useful results have been proven. They are stated below as 
preliminaries to further investigation. The following theorem is due to Hack, phrased in 
different form by [49]. 

Theorem 3.3 Let S = (P,T,F,M ) be a LSFC net and x an element of JV E . Then 
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• there exists a MG-component Ni = (PuT u Fi) of N% such that x € Pi U2\, 

• there exists a SM-component N 2 = (P 2 , T 2 , F 2 ) of N? such that x 6 P 2 U T 2 . 

This theorem states that if a FC net is live and safe, then the set of MG-components 
resulting from MG-reductions covers the net. Alternatively, the set of SM-components 
resulting from SM-reductions also covers the net. On the other hand, if a FC net is 
either nonlive or unsafe, then some reduction does not cover the net or is empty, or some 
component is not strongly connected. 

Another useful theorem from the theory of marked graphs [12] states that (a) for every 
marking M reachable from the initial marking Mo, there always exists a firing sequence a 
which brings the net from M back to itself, and (b) any such firing sequence a must fire all 
transitions in the net at least once and exactly the same number of times. This theorem 
is formalized below. 

For a sequence a G T* and Ti C T, a \T\ denotes the projection (or restriction) of a 
onto set T x . If t G T is a transition then #((?\t) is the number of occurrences of t in a. 
For a set of transitions 2\, #(<r[T 1 ) = £ (eTl #(<x|"i). For a net with an initial marking 
E = (P,T,P,M ), FS(E) denotes the set of all firing sequences of E. The following 
theorem states that in a live-safe marked graph, (a) for every marking M reachable from 
M , there exists a firing sequence which brings the net from M back to itself, and (b) every 
such firing sequence contains at least one instance of each transition. 

Theorem 3.4 Let E = (P, T, F, M ) be a live-safe marked graph. Then, 

(a) VM € [Mo) 3<r 6 T* : M[<r)M and 

(b) (Va | M[<r)M)(Vt € T) : #(<rft) = Jb, for some k>l. 

There are a number of recent results concerning the structural properties of LSFC nets. 
We mention below two theorems from [49]; these are important for later developments in 
the thesis. Let M be a marking of a net N, and Pi C P. Then MfP a denotes the 
submarking obtained by restricting M to P x . 

Informally, the theorem below states that the behavior of a SM-component — as charac- 
terized by firing sequences — is not constrained in any way by the composite FC net. The 
set of firing sequences of a SM-component Ei is the same as that of the composite net 
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restricted to the transitions in T x . Thus a LSFC net can be considered as a set of state 
machines which operate concurrently and synchronize with each other occasionally. 

Theorem 3.5 Let E = (P,T,F,M ) be a LSFC net, and suppose E t = (P U T U F U MZ) " 
a SM- component o/E, where Ml = M Q \Pi. Then 

FS(X X ) = FS(X)\T U 
where by definition F5(E)fT x = {a\T x \ a € FS(T)}. 

The following theorem states that each MG-component in a LSFC net can be activated 
at some marking and it is a LS marked graph under that marking. 

Theorem 3.6 Let E = (P,T,F,M ) be a LSFC net and N t = (P^TuFJ be a MG- 
component o/E. Then there exists a marking M € [M ) such that Ei = (Pi,T u F u M 1 ) is 
a live safe marked graph, where M 1 = M \P\. 

3.2 Firing Sequence Semantics of Free-Choice nets 

One main result of this section is a theorem stating the relation between the behavior 
of a LSFC net and those of the component subnets constituting the original net. The 
behavior of nets will be characterized in terms of sets of firing sequences. We will show 
that these sets are regular by demonstrating a procedure for constructing their equivalent 
finite automata (FA). For nets, these FA correspond precisely to the reachability graphs 
whose vertices represent the markings of nets, and arcs between vertices the transitions 
from one marking to another due to the firing of some transition in the net. This theorem 
provides an algorithm for obtaining the equivalent FA directly from the structure of a 
LSFC net, instead of having to determine every marking from the firing rule. 

3.2.1 Semantics 

Theorem 3.5 states that the set of firing sequences of a SM-component E x is the same 
as that of the composite net restricted to the transitions in T x . Thus a LSFC net can be 
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considered as a set of state machines which operate concurrently and synchronize with each 
other occasionally. Given this fundamental viewpoint, we can characterize the behavior of 
a LSFC net as a composition of firing sequences of the component state machines. 

Before discussing the theorem, we present a convenient operator called weave for com- 
bining firing sequences of concurrently operating nets. For a net E, FS(E) denotes its set 
of firing sequences. 

Definition 3.7 Let E t = (P U T U F U M^) and E 2 = (P 2 ,r 2 ,F 2 ,M 2 ) be two nets. The 
weave of two sets of firing sequences FS(Y,\) and F5(E 2 ) is given by 

FS&i) || F5(E 2 ) = {cr€ (T x U T 2 )* | a\T x e FS^) A a\T 2 e FS(Z 2 )}. 

Weaving is idempotent, commutative and associative. If 1\ f"lT 2 = 0, weaving is exactly 
the shuffle of two sets of sequences. The weave operator has been used in [25,53] as 
a convenient means of describing "synchronized concurrency" between two sequences of 
events, such that distinct events in two sequences can occur concurently in any order, but 
their common events must occur in synchrony. In these formulations, the set of firing 
sequences is always accompanied by the set of events to form a pair (T, FS) called a trace 
structure, where FS C T*. The inclusion of the set of transitions T is necessary in order 
for weave to be associative. In our formulation, the corresponding trace structure of a 
LSFC net E = {P,T,F,M ) is given by <T,FS(E)). 

Theorem 3.3 shows that for a LSFC net, there exists a set of one-token SM-components 
which cover it. The existence of these components is essential to the correctness of the 
following theorem. 

Theorem 3.8 Let E = (P,T,F,M ) be a LSFC net, {E^E,, . . . ,E n } be a set of one- 
token SM-components which covers the net, where E< = (P,-, T;, F;, M,j) and M^ = M \Pi, 
1 < i < n. Then 

FS(E) = F5(E0 || FS(E 2 ) || . . . || FS(E n ). 

Proof. Let FS' = F5(E 1 )||F5(E 2 )|| . . . ||FS(E n ). We need to show that F5(E) = FS'. 

(a) F5(E) C FS' : Theorem 3.5 states that if E is a LSFC net then for every SM- 
component E<, 1 < i < n : F5(E.) = F5(E)fi;. Hence, a G F5(E) =^ <r\Ti G FS(T)\Ti = 
F5(E,), which further implies that a € FS'. Therefore FS'(E) C FS'. 
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(b) FS' C FS(E) : We need to show that every sequence a G T* such that cr\Ti G 
F5(Si), 1 < i < n, is a firing sequence of £, i.e. a G JF\S(E). This is done by induction 
on \a\. 

Basis: \a\ = 0. Trivial. 

Induction step: Assume that a — at G T*, where o\T{ € FS(E,-), 1 < i < n and 
a G FS^E). Let M' be a marking of E such that M [ff)M'. We proceed to show that at 
M', if * is enabled in every SM-component which contains it, then t is also enabled in S. 
In which case, at is a firing sequence of S. 

Let p G -t, then there must exist some SM-component Sj containing p, as the SM- 
components cover the net. Because Sj is a SM-component, it must also contain t. Since 
at\Tj is a firing sequence of Ej, it follows that p must be marked at M'. By applying the 
same reasoning, we deduce that every input place of t must be marked. Hence at M', t is 
enabled in E. | 

Even though no proof exists, we believe that the above theorem should apply also to a 
superclass of FS nets called State-Machine Decomposable (SMD) nets. 

3.2.2 An algorithm for constructing reachability graphs 

So far, we have demonstrated that the set of firing sequences of a LSFC net can be obtained 
by weaving those of its SM-components. It will be shown in this section that the set of 
firing sequences of any LSFC net is regular by demonstrating the existence of a finite 
automaton (FA) which accepts or generates such a set of firing sequences. The result of 
Theorem 3.8 above provides an algorithm for constructing a FA directly from the structure 
of the net. 

We start first with a description of the algorithm itself. For a LSFC net E, $(E) 
denotes its equivalent FA (which is the same as its reachability graph). 

Algorithm 3.9 Let E = (P,T,F,M ) be a LSFC net and {E!,E 2 ,. . . ,E n } be a set of 
one-token SM-components which covers the net. Then 

*(E) = *(E0 || $(E 2 ) || ... ||$(E„) 
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Figure 3.2: (a) the state machines of SM-components from Fig. 3.1, and (b) the weave of 
two state machines, yielding the reachability graph of the LSFC net in Fig. 3.1. 

where $(E,)||$(Ej) denotes the weave of two state machines, as described subsequently. 

Fig. 3.2 shows construction of the equivalent FA of the LSFC net in Fig. 3.1 by weaving 
the state machines corresponding to the SM-components. The regular expressions for the 
component state machines are 

Ei = ((tit 3 \t 2 t 5 )t )* and E 2 = ((ht 4 \t 2 t 6 )t y . 

The regular expression for the LSFC net is Ei\\E 2 and can be determined directly from 
the state graph in (b) as Ei\\E 2 = ((*x(*3||*4)|*2(* 5 ||*e))*o)*. 

Note that if E,- is a SM-component, then 4>(E,) is the same as E,- itself, except for a few 
representational changes. In this case, FS(E,) can be represented by a regular expression 
involving the operators concatenation, union, and Kleene closure (denoted respectively by 
juxtaposition, bar |, and star *.) The construction algorithm in the above definition is 
more convenient and direct than the alternate approach of manipulating the set of firing 
sequencess and expressions, as suggested by Theorem 3.8. It is more convenient because 
all state machine components already exist; they need not be constructed from their sets 
of firing sequences. 

First, we describe a more conventional representation of state machines. Recall that 
if a LSFC net E = {P,T,F,M ) is a state machine then VM G [M ) : M(P) = 1 and 
V< € T : | • t\ = \t ■ | = 1. 



Definition 3.10 Let E = {P,T,F,M ) be a state machine. Then the finite automaton 
corresponding to E is given by $(E) = {S,T,6,s , q) where 
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• For P = {po,pi, . . .,p n }, S = { {po}, {Pi}> • • • , {Pn} } " the set of states, 

• s = {p | M (p) = 1} is the initial state, 

• 1 — { s o} w set of final states, 

• 6 : S x T —* S a partial function called transition function defined such that Vt € 
T, Vft, ft €P: 

(pi,t)€F A {t,p2)eF & S( Sl ,t) = s 2 , 

where 3 X = {pi}, s 2 = {p-i}. 

In graphical representation, states in S are drawn as small solid circles. The initial 
state is circled to distinguish it from the rest. The transition function is indicated by arcs 
between states, labeled with the appropriate transitions. Also by convention, Vs € 5 : 
£(s, e) = s. For clarity these arcs are omitted for every state 3. 

Let A be a regular set of firing sequences, then FA(A) will be used to denote the 
corresponding finite automaton. For a LS net E, FS(E) denotes its set of firing sequences 
and FA(FSCE)) denotes its finite automaton. Thus FA(FS(E)) = *(E). The weave of 
two finite automata is defined subsequently. In order to keep the definition general, the 
transition relation A C S x T x S will be used instead of the usual transition relation 
6:SxT->S. 2 

Definition 3.11 Let Ei and Ea be nets with sets of firing sequences E\ = .FS'(Ei) and 
JE7 2 = F5(E 2 ) and finite automata 

*(Ei) = FA&) = (S 1 ,T u A 1 ,s 1 ,q 1 ) 
*(E a ) = FA(E 2 ) = (S 2 ,T 2 ,A 2 ,sl,q 2 ) 

(a) The weave o/$(Ei) and $(E2) is given by 

SCEx) || $(E 2 ) ^ F^(iy £ 2 ). 

(6) The finite automaton corresponding to the weave of Ei and E 2 is given by 

FA(E X \\E 2 ) = (Si x S 2 ,Ti UT 2 ,A,{ So , 5o }, gi x q 2 ), 

2 A finite automaton with a transition relation is generally nondeterministic, while one with a transition 
function is deterministic. Converting from a nondeterministic finite automaton to a deterministic one is 
straightforward, using such well-known techniques as the subset construction method. 
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where A is defined as follows: Vox, a 2 G Si, V&i, 62 G S 2 , V* G Tt U T 2 U {e} : 

(a 1 ,i|T 1 ,a 2 >GA 1 A (M[T 2 ,& 2 ) G A 2 =» ({ai,6i},t,{a 2 ,6a}) e A. 

The inclusion of the empty transition e for all states s : (s,e,s) G A is essential for 
the concise characterization of a weave's state machine. By using the e-transitions, one 
avoids the distinction between different cases corresponding to t G Ti — T 2 , t G T 2 — Ti and 
t G Ti fl T 2 . The above definition is essentially due to [53]. 

3.3 Temporal Relations: Ordering, Concurrency and 
Conflict 

Under the one-token SM restriction on a LSFC net, one can determine directly from 
its structure whether two transitions are ordered, concurrent, or in conflict. Since we 
are only interested in nets which are strongly connected directed graphs, these temporal 
characterizations will be different from those based on partial orders which correspond to 
acyclic graphs. We will first define these sub-relations based on the structure of LSFC nets 
and then discuss their meaning and correspondence to situations in reachability graphs. 

As mentioned in Chapter 2, this syntactic characterization only works for LSFC nets 
with the additional restriction which we call one-token SM restriction, given again below. 
In fact, all results proven in this section assume this restriction. 

Restriction 3.12 (One-token SM) The class of LSFC nets considered is such that for 
a net in this class, every one of its SM-components contains exactly one token. 

3.3.1 Syntactic Characterization 

Below we define symmetric binary relations li, co, cf and dc on the set of transitions 
T; they stand for ordering, concurrent, conflict and direct-conflict, respectively. A simple 
path in a net N is a path x\x 2 . . . x n C N such that x, ^ Xj, 1 <i ^ j < n. A simple cycle 
in N is a simple path x x x 2 ...x n CN with x x = x n . An element x belonging to a cycle or 
path II is written as x G II. 
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Table 3.1: The temporal relation of the LSFC net in Fig. 3.1. 

Definition 3.13 Let S = (P, T, F, M ) be a LSFC net satisfying the one-token SM re- 
striction. For distinct transitions t, *' € T : 



(a) t and t' are ordered, denoted as {t,t'} € li, iff there exists a simple cycle in E to 
which both t and t' belong. 

(b) t and t' are concurrent, denoted as {t, t'} G co, iff {t, t'} £ li and there exists a 
MG-component o/E to which both t and t' belong. 

(c) t and t' are in conflict, denoted as {t, t'} € cf, iff 

1. either {t, t'} $. li and there exists a SM- component to which both t and t' belong, 

2. or there exists no SM-component or MG-component containing both t and t'. 



In the characterization of concurrency, the existence of a MG-component is required 
in order for two transitions to be concurrent (statement b). However, in case of conflicts, 
the existence of a SM-component is sufficient but not necessary for two transitions to be 
in conflict. Statement 62 indicates that two transitions are also in conflict if no reduction 
produces a subnet — be it a SM-component or a MG-component — which contains both 
of them. Intuitively, this makes sense, as two concurrent transitions must always occur 
together; this implies the existence of a such an MG-component. On the other hand, if 
two transitions are in conflict, the occurrence of one exclude that of the other. Hence it is 
possible that they do not both belong to any structural component of the net at all. 
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Applying the above definition to the FC net of Fig. 3.1, we can construct Table 3.1. 
Since the relations are symmetric, half of the table is implied by the other half. Note 
also that {t 4 ,t s } and {t 3 ,t 6 } belong to cf, but they do not both belong to any SM- or 
MG-cornponent. 

One special case of (c) is the direct- conflict relation: t and t' (t ^ t') are in direct- 
conflict, denoted as {t,t'} e dc, iff -tn-t' ^ 0. In the above definition, dc C cf: according 
to the FC hypothesis, there exists place p which is a unique shared place of * and t', 
therefore they cannot belong to the same simple cycle and furthermore, they must belong 
to the same SM-component. Also, define idas{{x,x}}CTxT and id C li. Another 
useful derived relation is idc = cf - dc: If two transitions t and t' are in conflict but not 
in direct conflict, then {t, t'} € idc and then they are said to be in indirect conflict. 

In a LS marked graph E = (P, T, F, M ), a cut C is a maximal set of elements in P U T 
which are pairwise not contained in the same simple cycle. That is, if we extend the binary 
relation r G {li, co,cf} to (PUT)x(PU T) then a cut C C P U T is defined such that 



{ 



Vx,y 6 C : {x,y} € co and 

Vz e (P U T) - C,3x e C : {x,z} & co. 



A t-cut C t C T consists of all transitions which can fire concurrently at some marking of 
the net. A p-cut C p C P consists of all places that can be marked at the same time. The 
following lemma states that in a LS marked graph, any LS marking M marks all places of 
a p-cut and leaves other places blank. 

Lemma 3.14 Let E = (P,T,F,M ) be a LS marked graph satisfying the one-token SM 
restriction. Then every life-safe marking M G [M ) marked all places of a p-cut C p and 
none else. That is, there exists C p such that 



M(P) = {1 V ^ C > 



otherwise 



Proof. Let {fti, . . . , Q n } be the set of simple cycles in iV E where ft, = (P { , T„ Ft). Since E 
is a marked graph, each place is uniquely identified by its unique input and unique output 
transitions. Hence a marked graph can be considered as a directed graph with vertices 
corresponding to transitions and arcs corresponding to places. Therefore by definition, a 
cut C p is a maximal set of arcs such that no two belong to the same simple cycle. Hence, 
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every simple cycle in {ftj, . . . , Q n } must contain exactly one arc in C p , i.e. Vt € {1, . . . , n} : 
\Pi n C p \ = 1. Consider a marking M which marks all places in C p and none else. Then 
under the one-token SM restriction, M is a live-safe marking because each simple cycle fl,- 
contains exactly one token. | 

It has been shown in [27] that for LS marked graphs with the property that every 
simple cycle contains exactly one token, there exists a unique equivalence class of life-safe 
markings: any two markings in this equivalence class are mutually reachable from one 
another. This equivalence class is precisely the set of all p-cuts {C p } of a LS marked 
graph, including those which are singleton sets (\C P \ = 1). 

The above result for marked graphs can be generalized to LSFC nets in a straightfor- 
ward manner. According to Theorem 3.6, every SM-component can be activated at some 
marking and it operates as a LS marked graph. Hence 



Theorem 3.15 Let S = (P, T, F, M ) be a LSFC net satisfying the one-token SM restric- 
tion. Then every life-safe marking M G [M ) marks all places of a p-cut C p of some 
MG- component. 



Some Examples. The above definition of the temporal relation indicates that one can 
determine the relation between two transitions only by looking at the global structure of 
a LSFC net. In Fig. 4a, it appears that C = {pi,p?,P3,P4} forms a p-cut in some net; 
however as shown in Fig. 4b, C is not a p-cut if there are two simple cycles — one containing 
ti,i 2 > the other t 3 , U — which do not share some common transition. This is because p% 
and pz are contained in a simple cycle and are therefore ordered. C is a p-cut only when 
there exists at least one transition u shared by the cycles, as shown in Fig. 4c. 

In another example (Fig. 4d), place p appears to be a redundant place [2] and could 
be removed without changing the behavior of the net. However, Fig. 4e shows that if p is 
removed then the simple cycle <iP<4P4<2P2<3Ps*i would no longer exist; in which case t x and 
< 4 would become concurrent. Thus in this particular case, the removal of p does indeed 
change the behavior of the net drastically and therefore it is not redundant. 
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Figure 3.3: (a) C — {pi,P2iPsiP*} appears to be a p-cut in some net. However (b) C is not 
a p-cut unless (c) there exists a shared transition «. (d) Place p appears to be a redundant 
place. However, in (e) it is not. 

3.3.2 Partition of the Temporal Relation and Correspondence to 
Reachability Graphs 

As shown next, the above syntactic characterizations partition the temporal relation, de- 
fined as tr = T x T, into disjoint subsets of ordering, concurrency and conflict, as is 
illustrated by Fig. 3.4. The subset co represents the non- sequential behavior, lillcf repre- 
sents the sequential behavior of the net. For LS marked graphs, cf = and tr = li U co. 
For LS state machines, co = and tr = li U cf . 

Theorem 3.16 Let S = (P,T,F,M ) be a LSFC net satisfying the one-token SM restric- 
tion, and tr = T x T be called the temporal relation. Then li, co and cf partition tr into 

disjoint subsets: 

(a) li U co U cf = tr, and 

(6) li n co = li n cf = co n cf = 0. 



Proof. Statement (a) trivially follows from the definitions, and so do li n co = and 
li n cf = 0. It remains to show that co (1 cf = 0. To establish this fact, it suffices to 
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Figure 3.4: Partitions of the temporal relation tr. 

show that in a LSFC net satisfying the one-token SM restriction, if two transitions do 
not belong to a simple cycle then they cannot belong to some MG-component and some 
SM-component at the same time. (In case two transitions are in conflict by not belonging 
to any structural component at all, it is trivial to see that they cannot be concurrent.) 

Let iVs denote the underlying structure of S. First, note that if two transitions t and 
t' do belong to a simple cycle in N% then t and t' must belong to a simple cycle in some 
MG-component Ni = (Pi,Ti,Fi) and in some SM-component JV 2 = (P 2 ,T 2 ,F 2 ), because 
both MG and SM reduction cover the net. Thus, if t and t' do not belong to any simple 
cycle in N, they do not belong to a simple cycle in any MG-component or SM-component. 
In this case, we show that if t and t' belong to both N\ and JV 2 then the net is either unsafe 
or nonlive. 

If t, t' G Ti but no simple cycle containing both of them, then there must exist some 
u G Ti such that t, u G Q x and t\u G Oi, where Q, x , Q [ are distinct simple cycles in Ni 
(Fig. 3.5). If t,t' G T 2 but no simple cycle containing both of them, then there must exist 
some pePj such that t,p€ fl 2 and t',p G 12 2 , where ft2,^ 2 are distinct simple cycles in 
N 2 (Fig. 3.5). 

Since N\ is a MG-component of a LSFC net, according to Theorem 3.6, there exists a 
marking which activates Ni and Ni will operate as a live-safe marked graph. Since t and 
t' do not belong to the same simple cycle, according to Theorem 3.15, in iV x there exists 
a p-cut which corresponds to a marking M G [M ) under which both t and f are enabled. 
Hence at M, all input places of t and t' are marked. Since the cycles fi 2 and Q' 2 in iV 2 
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SM-component Ng 



Figure 3.5: Proof of Theorem 3.16. 

contain transitions t and t' respectively, they must each contains one input place of t or 
f. Since all input places of t and f are marked, the SM-component JV 2 contains at least 
two tokens. Under the one-token SM restriction, this would lead to unsafeness. On the 
other hand, if N 2 contains only one token then only one of *, t' can possibly be enabled; 
this implies that u cannot be enabled subsequently, leading to a deadlock. | 

The above classifications of the temporal relation are based on the syntax of LSFC nets. 
We now attempt to connect these classifications to the normal understanding of ordering, 
concurrency and conflict in terms of firing sequences. It will be shown that for LSFC nets, 
there exists a unique correspondence between an element of the temporal relation and a 
situation in a reachability graph of a net. 

The following theorem gives the characterization of ordering, concurrency and conflict 
in terms of reachability graphs, or equivalently, firing sequences. Fig. 3.6 contains graphs 
illustrating these cases, in which vertices representing markings, solid arcs transitions be- 
tween markings. The dotted arcs indicate explicitly those transitions which cannot occur; 
dashed arcs indicate a path between two markings. 

A cycle in a reachability graph is characterized by M^^fo) • ■ • [* n -i)M n where 
Mi = M n ; a = t x t 2 . . . <„_i is a firing sequence such that M%[a)M\. If furthermore M,- ^ 
M,, 1 < i ^ j < n then it is a simple cycle; in this case, a is called the firing sequence 
corresponding to a simple cycle. In the following theorem and its proof, we use a to denote 
such a firing sequence. 
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(a) (b) (c) 

Figure 3.6: t, if are (a) in direct-conflict (dc) (b) concurrent (co) (c) ordered or in indi- 
rect-conflict (li U idc). 

Theorem 3.17 Let E = (P, T, F, M ) be a LSFC net satisfying the one-token SM restric- 
tion. ThenVt,? £ T; 

(a) {t, t'} € dc & 3Me [M ) : M[t) A M[t') A -.Af [«') A -iM [t't> 

(6) {t, ?} e co *> 3M € [M > : M [«') A Af [ft) 

(c) {t, t'} € H U idc «» ^MG [M > : M[t) A M[t') 

(d) {*, t'} 6 idc «= (£M € [M > : M[t) A M [<')) A (^<r € T* : t, t' 6 a), 

where a is a firing sequence corresponding to a simple cycle in the reachability graph o/E. 

Parts (a) and (b) state that if two transitions are either concurrent or in direct conflict, 
then there is a marking in which both are enabled. Part (c) states that if two transitions 
are either ordered or in indirect conflict then they are never enabled in the same marking. 
Thus by inspecting the local structure of the reachability graph, it is possible to determine 
when two transitions are either concurrent or in direct conflict. However, ordering cannot 
be distinguished from indirect conflict. Part (d) further states that in order to discern 
these two cases, the global structure of the reachability graph needs be inspected: for 
every two transitions t and t\ if there exists no marking M in which both transitions are 
enabled and furthermore, there exists no firing sequence a corresponding to a simple cycle 
in the reachability graph such that t, t' G <t, then t and t' are in indirect conflict. 

Proof of Theorem S.17. Part (a). (=») If {t,t'} G dc then in iV s , there exists no simple 
cycle containing both * and t', and there exists some SM-component N 2 such that t, t' € T 2 . 
Every such SM-component must contain exactly one token. Furthermore according to the 
FC hypothesis, 3p € P 2 : p- = {t,t'} and 3M € [M ) : M(p) = 1. Hence M[t) and M[t'). 
Moreover, since the firing of either t or t' will remove the token in p, M{W) and M[tt') 
cannot be true. 

(<=) If M[t) A M[f), and W and tt' are not firing sequences then it must be the case 
that -t n -t' ^ 0. For suppose that -t n -t' = 0. Then since M[t) A M[t'}, all places in -t U f 
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must contain tokens. However this implies that M[tt')AM[ft), a contradiction. Therefore, 
it must be the case that 3p € P : -t D -t' = {p} and hence {t, t'} € dc. 

Part (b). Note that M[W) A M[t't) => M[t) A M[t') according to the definition of firing 
sequences. 

(=^) If {t, t'} € co then in iV E there exists no simple cycle containing both t and f, and 
there exists some MG-component Ni such that t, t' £ 2\. Since t and if belong to different 
simple cycles of a marked graph N u -tf) -t' = t • C\t'- = and furthermore, -t D •? C C p , 
where C p is a p-cut in N\. Therefore, according to Lemma 3.14, 3M € [Mo) : M{p) = 
1 Vp 6 -t U -t'. Clearly, at M both t and <' are enabled independently, thus proving the 
necessary condition. 

(«=) First, we show that -t D -t' = t ■ C\t'- = 0. Suppose that -t D -t' ^ 0, then due to the 
FC hypothesis, 3p € P : -t (1 -t' = {p}. Then according to Part (a), «' and ft cannot be 
firing sequence — a contradiction. Hence -t D •£' = 0. From •< fl ■<' = 0, using the fact that 
the net is safe, we show that t ■ f)t'- = 0. For if t • fit'- / then 3p € P : p € < ■ Dt'-. Since 
both < and t' are enabled, they can fire concurrently, placing two tokens in p and the net 
is unsafe. 

Now we proceed to show that t and t' must belong to distinct simple cycles of some 
MG-component JVi. t and t' cannot both belong to any simple cycle ft, for if they do then 
Q, must contain at least two tokens, each from an input place of t and t'; under the one- 
token SM restriction, this leads to unsafe behavior. Hence according to Theorem 3.16, they 
must belong to distinct simpe cycles of either a MG-component JVi or a SM-component 
N 2 . However, if JV 2 existed, it would contain at least two tokens, one from each input place 
of t and t'. This causes unsafe behavior. Therefore they must belong to distinct cycles of 
N\ and hence by definition, {t, f} 6 co. 

Part (c). From parts (a) and (b), it follows immediately that 

{t,t'} G co U dc & 3M e [Mo) : M[t) A M[t'), 

which means that if two transitions are either concurrent or in direct conflict, then there is a 
marking in which both are enabled. To prove (c), note that (JBM € [M ) : M[t)AM[t')) •<=>• 
{t, t'} $ co U dc «* {t, ?} € tr - co U dc = li U (cf - dc) = li U idc. 
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Part (d). From (c), we have fiM : M[t) A M[t') =» {t,t'} G li U idc. We claim that 
(fiaeT* -.t^ea) =* {*, f} e cf. The result follows immediately. 

To verify the claim, note that if {t, t'} G li U co then there exists a MG-component JVi 
containing both t and t'. According to Theorem 3.4, V<r € Tf \ (3M G [M > : M[a)M) : a 
must contain all transitions in 2V Since t,f G 2\, it follows that t,t' G a. Also, since 
Ti C T, we have {r, f } € li U co => 3a G T* : t, f G <r. Or equivalently, 

(^6r:t,f6<r) =► {M'} £ li U co 4* {r,*'}Gcf. 



Chapter 4 

Signal Transition Graphs 



In this chapter, we introduce the Signal Transition Graph model. STGs correspond to 
the class of LSFC nets with interpreted transitions: transitions in nets are interpreted as 
transition* of signals in logic circuits. Most results for LSFC nets developed in the last 
chapter apply directly to STGs. Note that we only deal with LSFC nets which satisfy the 
one-token SM restriction. 

We start out in Section 1 by giving the syntax and semantics of STGs. Briefly, a 
STG is a formal behavioral specification of a control circuit from which a set of transition 
sequences can be generated. Such a set has an equivalent finite automata representation 
called a state graph. From state graphs, one can determine the network function, which 
is a collection of logic functions describing the behavior of signals in the circuit. Section 2 
discusses state assignment, the procedure for obtaining state graphs from STGs. Section 
3 touches upon the area of composition of control modules. 



4.1 Syntax and Semantics 

Signal Transition Graphs are a formal behavioral specification of control circuits whose 
operation may involve ordering, concurrency and conflicts. A digital circuit (or network) 
is an interconnection of logic elements, each having one output terminal and a number of 
input terminals. Every input terminal is connected to either an input terminal of the entire 
network, or to an output terminal of another logic element in the network. The set of all 
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terminals of a network is called the set of signals. Let J denote such a set of signals, then 
J can be partitioned into the set of input signals Jj, the set of output signals Jo and the 
set of internal signals Jn- It is sometimes convenient to use the set of non-input signals, 
Jni = Jn U Jo 7^ to reflect the intention that changes in input signals are exogenous 
while changes in non-input signals are caused by the network. 

The set of signal transitions is defined as T = J x {+, — }. For every signal j G J, there 
is a pair of signal transitions {j+,j_} associated with it. We also adopt the notation that 
if t is used to denote j+ then i denotes j_ and vice versa. When the direction of transition 
is not important, j* is used to denote a transition of signal j (either j + or j-). The set of 
signal transitions T is likewise partitioned into T/ = J/ x {+,—}, Tjv = Jn x {+, — } and 
To = Jo x {+j — }• In order to distinguish between input and non-input signal transitions 
in a graphical representation, transitions in Tj are underlined. 

4.1.1 Signal Transition Graphs 

A Signal Transition Graph (STG) is a Petri net in which transitions are identified with 
signal transitions in a network whose set of signals is J. 

Definition 4.1 (Signal Transition Graphs) Let J be a set of signals of a network. A 
Signal Transition Graph defined on J is a Petri net Sj = (P, T, F, M ) with T = Jx {+, — }. 

Furthermore, a Signal Transition Graph is said to be well-formed */ (i) it is a LSFC 
net satisfying the one-token SM restriction and (ii) if a place p has more than one output 
transition, then all output transitions of p must be transitions of input signals, i.e. Vp € 

P : \p • | > 1 =► p- C Ti. 

In the sequel, well-formed STGs will be referred to simply as STGs unless stated otherwise. 
Obviously, in a STG, \T\ = 2k where k is a positive interger. The restriction Vp 6 P ■ 
\p • | > 1 =£• p- C Ti indicates that all signal transitions which are in direct conflict 
must be input ones, i.e. free choices are input choices. This allows STGs to specify the 
behavior of circuits whose operation involves sequentiality, deterministic concurrency and 
nondeterministic input choices. 1 



1 In Chapter 8, we will extend the syntax of STG to allow the specification of internal choices. In these 
cases, one element from a set of output transitions of a place is chosen to be fired depending on the holding 
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As mentioned in Chapter 2, the graphical representation of STGs will differ from Petri 
nets in two accounts: (i) A transition in STGs is not depicted as a bar but by its name 
instead, (ii) Any place p in STGs with one input and one output transition, e.g. -p — {ti} 
and p- = {t 2 }, will no * be drawn. An arc going directly from t\ to t 2 will be drawn 
instead: tx —* t 2 . Such an arc is an instance of the causal relation R C T x T, such that 
t x Rt 2 4» 3p G P : {h,p) G F A {p,t 2 ) G F. 

4.1.2 State Graphs 

The semantics of STGs are given in terms of sets of transition sequences. STGs define 
sets of transition sequences which have equivalent FA representations called state graphs. 
These can be obtained by applying the results for LSFC nets described in Chapter 3. 

For a FA $ generated from a LSFC net S, there is a corresponding state graph, denoted 
by $ j generated from the STG Sj, where Sj is an interpretation of the LSFC net S. State 
graphs are defined as follows. 

Definition 4.2 (State Graphs) Let J = {ji, J2, ■ ■ • , jn} be a set of signals of a circuit. 
A state graph defined on J is given by $j = (S,T,6,s ), 2 where 

• S is the set of states, defined as S = {s \ s : J — ► {0, 1}}; every s G S is a function 
s : J —► {0, 1} and (s(ji),s(J2), . . . ,s(jn)) " o 6»nory vector of signal values in state 
s. 

• s G S is the initial state of the circuit. 

• T = J x {+, — } is the set of signal transitions. 

• 6:SxT—*Sisa partial function called the transition function, having the property 
that Vs, s' G S, Vt G T such that 6(s, t) = s' : 

if t = j + then s(j) = and s'(j) = 1 
if t = j_ then s(j) = 1 and s'(j) = 0. 

States s and s' are called adjacent; s' is a next-state of s. 



of a certain condition in the circuit; the choices are no longer nondeterministic. 

2 Here, instead of describing a state graph as a 5-tuple (5, T,6,8o,q), we adopt the convention to drop q 
(the set of final states) if q = {«o}- 
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As noted in Chapter 2, in the construction of an equivalent FA from a set of sequences, 
a state is an abstract concept, denned as an equivalence class of sequences with the same 
postfixes; there is no apparent relationship between a state and the transitions enabled in 
it. However, for state graphs obtained from a STG, not only do we require that it be a 
FA equivalent to the set of sequences defined by a STG, but we also require that states 
be interpreted as binary vectors representing the values of signals in a circuit. There is a 
direct connection between states and transitions: states are vectors of values of a set of 
signals, whereas transitions are transitions of the same set of signals. 

In the above definition, the transition function is extended to 6 : S x T* -► 5 such 
that for t E T and a e T*, 6(s,ta) = 6(s\o) where s' = 6(s,t). Also, Vs € S, 6(s,e) = s. 
By considering states as equivalent to markings, we can adopt the notations in Chapter 2: 
*' = *(M) <* s[t)3'; s' = 6(s,a) & s[a)s'; [s) denotes the set of states reachable from 
s, etc. Graphically, s[t)s' is represented as i-^i'; s[<t)s' as •-%•. A transition t is said 
to be enabled in state s if s[<); an enabled transition may occur or fire. 

We denote the state graph of a STG Sj as $j. The notions of ordering, concurrency and 
conflict in STGs and their correspondence in state graphs are exactly the same as those for 
LSFC nets. The following result is the restatement of Theorem 2.2 with markings replaced 
by states. 



Theorem 4.3 Let Ej = (P,T,F,M ) be a STG and $ 7 = (S,T,6,S ) its state graph. 
Vt,t'€T: 

(a) {*, f } e dc 4* 3a € [s ) : s[t) A s[t') A -.*[«') A -is[tft) 

(b) {t, t'} € co ^ 35 € [so) : s[W) A s[t't) 

(c) {t, t'} e li U idc & JBse [s ) : 3[t) A 3[t') 

(d) {t, t'} € idc <*= (^ € [ So ) : s [t) A s[<')) A (fla € T* : t, f € a) 

where a is a firing sequence corresponding to a simple cycle in $(£j). 



We will return to more discussion of properties of state graphs in the next chapter. In order 
to give a complete picture of our direction, we describe next the network function, being 
a set of Boolean equations derived from the state graph. The network function describes 
the states of every signal in a digital network. 
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4.1.3 Network functions: Implementations of state graphs. 

Similar to Muller [36], we define a digital network as an interconnection of a finite number 
of logic elements of unbounded delays and containing no clocks, i.e. operation is asyn- 
chronous. However, we extend his autonomous networks (those with no inputs) to cover 
cases with inputs as well as internal signals. 

A logic element implements one signal of the control circuit. It is a logic circuit with 
one output and one or more inputs and is allowed to have memory, i.e. it may have internal 
feedback wires. The delay model used is one in which a logic gate can be modeled as an 
infinitely fast combinational circuit followed by a delay (of unbounded value) at the output, 
and wires with no delays. In practice, these assumptions hold; long wires which are highly 
capacitive can be modeled explicitly as delay circuits if necessary. 

Definition 4.4 (Network Functions) Let $j = (S,T,8,s ) be a state graph defined on 
J, a set of signals of a network. Then f : S x J -* {0,1} is a partial function called the 
network function, defined as follows: 

(a) For j € J, s E S, f(s,j) is called the implied value of signal j in state s, defined 

such that: 

f(s i) - i S 'W ^ *' € S : s\j.)s' 
n,J) ~\s(j) otherwise. 

(b) The set of all implied values for signal j, f(j) = {f(s,j) | 5 £ [s )} is the logic 
function of signal j. 

(c) Hence the network function can be considered as a collection of logic functions of all 
signals in J: f = {f(j) \j £ J}. 

Remarks on Definition 4.4. 

1. The implied value of a signal j in state s is given by (a). If there are states s[,s' 2 
such that 5[< 1 )si and s[t 2 )s 2 for some t x ,< 2 € T, then there are two cases: 

• If either t x or t 2 1S a transition of j, for instance h = j m and t 2 ^ j m , then s'^j) ^ 
40) = S U)- I n which case we always choose s[(j) as the value for f(s,j), which is 
the value resulting from the transition of signal j itself. 
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• If neither of t u t 2 is a transition of signal j then a' t (j) = s' 2 (j) = s(j) and the implied 
value of j in state s is the same: f(s,j) — s(j). 

2. Even though network functions are defined for all signals, only those for non-input 
signals are necessary for the logic implementation of the networks. This is because only 
non-input transitions in T NI are generated by logic elements in the networks. If S(s, t) 
is defined for some state s 6 5 and signal transition t € Tni then the occurrence of t is 
caused by the logic elements whenever the network gets into state s. Furthermore, since 
the firing of t depends on the delays of the logic elements, it cannot be controlled externally. 
However, if t G T/ then whenever the network is in state s, it waits for the occurrence of 
input transition t which is caused by the environment. The means for the environment 
to detect that the network is in state s is through a communication protocol between 
the environment and the network. The logic functions for input signals only indicate how 
external transitions from the environment should interact with the logic network according 
to the specification. 

3. The logic function f(j) of signal j is a Boolean function in \J\ variables describing 
the logic element (whose output is) j. Logic element j may have fewer inputs than \J\. 
This fact does not invalidate our model, for we simply choose f(j) as a function that does 
not explicitly depend upon all of its variables. This can be accomplished by decomposing 
the state graph to m i n imize the interdependence between variables which appear as out- 
put and input of a logic element. A state graphs obtained from a well-formed STG can 
be decomposed in a straightforward manner using the causal relation R defined on the 
STG. This technique yields very efficient implementation of networks and will be dicussed 
subsequently in Chapter 6. 

4.1.4 An Example 

We have presented the syntax of STG, its semantics in terms of state graphs and the 
network function which describes the logic implementation of the circuit. In this example, 
we show a STG specification of a C-element, its state graph and network function. Fig. 4.1a 
shows a circuit with inputs a, b and output c. Thus, its set of signals is J = {a, 6, c}, 
and J 1 = {a,b} and J = {c}. The behavior of this circuit is described by the STG in 
Fig. 4.1b. Since its corresponding uninterpreted net is a marked graph, no places are drawn 
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Figure 4.1: (a) A C-element, (b) A STG specification and (c) its state graph, (c) The 
transition map and K-map. 



explicitly; they are uniquely determined by their input and output transitions. The arcs 
constitute the causal relation R. In the initial marking M , places (c_,a + ) and (c_,6 + ) 
are marked. The set of transition sequences specified by this STG is given by the regular 
expression (a+c + a-C- ||6 + c + 6_c_)*, which can be simplified to ((a+ ||6+ )c+(a_ ||6_)c_)*. The 
corresponding state graph is given in Fig. 4.1c. The initial state s is such that s [a+) and 
s [b+). 

In a state graph, the logic equation for every non-input signal j is determined from the 
set of implied values of j in all states: { f(s, j) | s € [s ) }. This can be done conveniently 
by transferring the state graph to a type of Karnaugh maps (K-map) called transition 
map (T-map), such that every state of the state graph has a corresponding square in the 
K-map, and state transitions are indicated by arcs between squares. Then for each signal j 
to be determined, the T-map is converted to a K-map for j as follows: every square in the 
T-map (corresponding to a state s) is entered with the implied value of signal j in state s, 
f(s, j). The logic equation for j can be readily determined from the resulting K-map. For 
example, the logic equation for signal c is determined from the state graph in Fig. 4.1c by 
transfering it to a T-map and K-map (Fig 4.1d) from which, c = a.b + c(a + b). This is 
precisely the logic function of a C-element. 

Note the intimate relationship between a state graph and its logic implementation: 
states in a state graphs are simply collections of values of signals in a circuit, and transitions 
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simply transitions of signals in the same circuit. In fact, one can construct a state graph 
for any circuit. However, we are only interested in circuits whose state graphs satisfy the 
properties of liveness and persistency. In the next chapter we will study these properties 
of state graphs and determine their characterizations in STGs. 

4.2 Obtaining state graphs from STGs 

Let Ej = (P, T, F, M ) be a STG. Then E denotes its uninterpreted net, also represented 
by (P, T, JF, Mo) but T is given no particular interpretation. Since E is a LSFC net its 
equivalent FA, denoted by $, can be determined using the construction algorithm discussed 
in Chapter 3. The state graph of Ej, denoted by $j, can then be obtained by assigning 
binary values to states of $. 

Let $ = (5', T, 8', s ) denote the above equivalent FA. Then the state graph $j = 
(5, T, 8, so) can be obtained by interpreting states in S' as binary vectors representing 
values of signals in J. This interpretation is the state assignment process, which can be 
described by a partial function a : S' —* S, called the state- assignment function (Fig. 4.2). 
This function is defined such that 

• Every state s' in $ maps to a binary state s in $j: W € [s ) C S' 3s 6 S : a(s') = s. 

• Every transition S^s^t) = s' 2 in $ maps to 6(si,t) = s 2 in $j, where si = a(s[), 
s 2 = a(s' 2 ). 

A state assignment such that 6 satisfies the condition stated in Definition 4.2 is called 
consistent. The essential idea is that in a state graph $,/, if s[t)s' then according to the 
physical behavior of digital circuits: if t = j + then s(j) — and s'(j) = 1; if t = j_ then 
s(j) = 1 and s'(j) = 0. The triple {s,t, s') is said to be consistent. Formally, a consistent 
state assignment for a state graph can be defined as follows. 

Definition 4.5 (Consistent state assignment) Let $ = (5', T, 6', s' Q ) be an uninter- 
preted FA and $./ = (5, T,6,s ) be a state graph obtained from $. Then $j has a consistent 
state assignment iff there exists a state assignment function a : S' — > S satisfying 

Vt € T,Vs[, s' 2 E S" : whenever s[[t)s2 then {a(s[), t, <x(s 2 )) is consistent. 
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Figure 4.2: The state assignment function a maps a state in the FA to a binary state in 
the state graph. 

Since the transition function 6 is defined such that if S(si, t) = s 2 then s t and s 2 are adjacent 
states, it immediately follows that in a state graph with a consistent assignment, every 
cycle (a path starting from some state and ending at itself) must contain equal numbers 
of positive and negative instances of any signal transition and they must alternate. Hence, 
we have the following 

Lemma 4.6 Let $,/ = {S,T,6,s ) be a state graph. Then $j has a consistent state as- 
signment iff for every state s G S and for every firing sequence a e T* such that s[cr)s: 

c - 1 \ either a\{t,t} = (ti) k or a\{t,i} = (it) k , 
for some integer k > 0. 

In case a transition t does not appear in a sequence a then k — and the above condition 
holds vacuously. It turns out that there is a direct way to ensure consistent state assignment 
from STGs. Below, we state the conditions on a STG in order for its state graph to have 
a consistent state assignment. First we consider the subclass of STGs corresponding to 
live-safe marked graphs. 



Lemma 4.7 Let Hj = (P, T, F, M ) be a STG whose uninterpreted net is a live-safe 
marked graph. Then its state graph $j has a consistent state assignment iff every pair 
of transitions t,i €T is ordered: {t, i} e li. 
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Fig. 4.3a shows a STG with consistent state assignment; Fig. 4.3b is a STG with no 
consistent state assignment because there are transitions b + , 6_ which are concurrent; its 
state graph contains a state s with s[b + ) and s[6_) and hence no value of s(b) can be chosen 
such that both 6 + and 6_ are consistent for s. 

Proof. (=►) 3t e T : {t, t] g li =► $j does not have a consistent assignment: Since Sj is 
a marked graph, {t,i} <£ li =*{*,*} € co. This implies that 3s € [s ) : s[t)s' A s[i)s", for 
some s', a" € S. Obviously, if (s, t, s') is consistent then (s, i, s") cannot be, and vice versa. 
Hence $j cannot have a consistent state assignment. 

(-4=) V* € T : {*, t) 6 li => $j has a consistent assignment: According to Theorem 3.8, 
the set of firing sequences of £j can be obtained by veawing those of its SM-components. 
Since Sj is a marked graph, these SM-components are simple cycles. Since t, t are ordered, 
they must belong to some simple cycle ft in iV E . Hence the firing sequence defined by 0, 
must have the following form (given in terms of regular expressions): either (...*...*...)* 
or (. . . t . . . t . . .)*, depending on which place in ft contains a token in the initial marking. 

Choose any firing sequence a e T* of Ej such that s^sx for some sx G [s ). Since £j 
is a marked graph, Theorem 3.4 shows that a must contain an instance of every transition 
in T. Furthermore, as discussed in the above paragraph, for every pair of transitions t, t, 
either <r\{t,i} = tt or cr\{t,i} = it. Hence according to Lemma 4.7, $j has a consistent 
state assignment. ■ 

The above result can be generalized to the class of STGs corresponding to LSFC nets. 

Theorem 4.8 Let T,j be a STG and $j its state graph. Then $j has a consistent state 
assignment iff every pair of transitions t,i is ordered in Sj. 

Fig. 4.3c shows another STG with consistent state assignment which specifies input 
choices; its uninterpreted net is a LSFC net. Note the requirement that every pair of 
transitions {t, i} be ordered in every MG-component containing them. Due to this rather 
stringent requirement for consistent state assignment, the expressive power of STGs for 
specifying input choices is limited. 

Proof. Let Ej = (P,T,F,M ). According to Theorem 3.6, there exists for each MG- 
component Ni = (Pi,Ti,Fi) a marking M, € [M ) at which JV t - operates as a live-safe 
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Figtire 4.3: (a) A STG with consistent state assignment, (b) A STG without consistent 
state assignment because b+ and 6_ are concurrent, (c) Another STG specifying input 
choices which has a consistent state assignment. 
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marked graph. Hence, the net Ej can operate deterministically in one MG-component JV,- 
and switches over to another, Nj say, at some appropriate marking M. Marking M must 
mark some place p which is a free-choice place (i.e. \p • | > 1) such that some transitions 
ti G T,-, tj £ Tj must be output transitions of p. 

Since every MG-component Ni can be operated continuously from some marking M,-, 
the set of firing sequences generated by (JV,-, (Mi \P%)) must have an equivalent state graph, 
which in turn must also be a part of the state graph of Ej. Therefore, for the state graph 
of Sj to have a consistent assignment, it is required that the state graph $; of every 
MG-component (Ni, (Mi [P«)) have a consistent assignment. Using the result from Lemma 
4.7 above, we conclude that every pair of signal transitions t, i must be ordered in every 
MG-component Ni to which they belong. It then follows from the definition of ordering 
that t , t are ordered. | 



4.3 Composition 

As stated earlier, the objective of this thesis is to develop techniques for direct synthesis 
of control circuits from STG specifications. Within this scope, the study of composition 
of control modules will be touched upon lightly. A great deal of work in different aspects 
of composition of control modules has been carried out; most relevant to our application 
is one based on the formalism of trace theory [25,53]. Since we have established the 
correspondence between net syntax and its underlying trace (firing sequence) semantics, 
adapting these results to our framework is straightforward. Even though composition is 
of fundamental importance for validating the correctness of systems constructed from an 
interconnection of control modules it is outside the scope of our immediate concern. 

We advocate the use of STGs for direct synthesis of control modules in a system 
organization with distributed control structures. In these systems, the control section is 
partitioned into a number of control modules which communicate with one another using 
a communication discipline such as the request/acknowledge protocol. Once the control 
modules have been identified clearly, their behavior is expressed in STG notations. Every 
module has its own STG specification which defines its internal behavior with respect to 
the interface with other modules. The interface between a module and its external world 
constitutes a boundary between a module and its environment. 
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Interface behavior. Fig. 4.4a shows a simple case of module/environment interface. 
The module A shown consists of one input link {I r ,I a } and one output link {O r ,O a }, 
where a link is a pair of request/ acknowledge signals. We use the convention that for a 
link L, {L r , L a } denotes its request/acknowledge signal pair. The behavior of module A 
at the interface is specified by {/„+ -» £_,!._ -► £+} and {O r + -* CL-,Ot- -+ #_»+} at 
the input link I and output link 0, respectively; the arrows — ► are members of the causal 
relation R defined earlier. In general, we have the following rule for specifying the interface 
for STGs: every transition t of an input signal can be caused only by a transition of an 
output signal, u say, and furthermore, there can be exactly one u causing t. More formally, 
in a STG it is required that for every t € T I} there exists exactly one u such that u -* t 
and u 6 To- The reason for allowing only one transition to cause an input transition is 
that we only attempt to simulate the interface behavior by such a temporal constraint; 
input transitions are actually caused by the environment. 



Composition. Given two control modules which are connected together at some link, 
one can determine the behavior of the composite system by composing the individual 
behavior of each module. The only type of composition required here is the concurrent 
composition [25]. Informally, the concurrent composition of two STGs involves merging 
them together by "fusing" transitions in two nets; these fused transitions become internal 
transitions of the composite net. 

An example to illustrate this composition is given in Figures 4.4b and c. Fig. 4. 4b shows 
two modules A and B and parts of their STGs which specify the interface behavior. The 
composition of these STGs produces a new STG (Fig. 4.4c) which no longer corresponds 
to a free-choice net: transitions r 1+ and r 2+ are no longer enabled in the same marking. 
This illustrates the following important concept: When two input transitions in the STG 
specification of a module are in direct conflict (and therefore represent a nondeterministic 
choice), they may actually represent external choices which are totally deterministic in the 
composite net consisting of the module and its environment. This is exactly the reason 
why we restrict free-choices in a net to transitions of input signals. 

In the following definition of concurrent composition of two STGs, T ri , T , and T Ni 
denote the subsets of input, output and internal transitions, respectively, of the set of 
transitions T;. 
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Figure 4.4: (a) A control module with an input link and an output link, (b) Two control 
modules with connected communation links and (c) their composition. 

Definition 4.9 Let Eji = (P u Ti,F u M%) and S J2 = (P 2 ,T 2 , F 2 , M$) be STG specifica- 
tions of two control modules, with the restriction that 

T n n T 02 ± 0, T n n T 0l £ 0, T n n T I2 = Toi n T 02 = Pi n P 2 = 0. 

The concurrent composition of Sji and 12j 2 is denoted by Sj = Eji||I!j2. Let £j = 
(P, T, F, Mo), then it is defined as follows: 

• J = J\\JJ 2 , Ji — J 7iU J i 2 — J\C\ J 2 , Jo = JoiUJo 2 — JiH J 2 , Jn — JniU Jn2^{ «^iH J 2 ). 

• T= J x {+,-}. 

• P = P a U P 2 , F = *i U F 2 , M = M^ U Ml 

Using Theorem 3.8, the set of transition sequences of the composite net is simply the 
weave of the individual sets, provided the latter are of STGs corresponding live-safe marked 
graphs. Equivalently, the finite automaton of the composite net is the weave of those of 
the individual nets. 



Theorem 4.10 Let T,j\, £j 2 be STGs whose uninterpreted nets are live-safe marked 
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graphs, and $jx, $ J2 be their state graphs. Let Sj = E.n||£./2 and $j denote its state 
graph. Then $j = $ji||$j2, the weave of two state machines given by Def. 8.11. 

Note that this result does not generalize to composition of STGs whose uninterpreted nets 
are LSFC nets because, as we have illustrated through Fig. 4.4, the composition of two 
LSFC nets results in a net which may no longer be free-choice. Also, the above theorem 
does not guarantee that the composite net Sj is live-safe even if S Jx and Sj 2 are live-safe. 
It may be the case that when two nets are composed, a new simple cycle which contains no 
token is created in the composite net, leading to a deadlock. However, the theorem does 
provide a method for verifying whether the composite net is live: £j is live if the weave of 
none of the firing sequences results in an empty set. 



Chapter 5 

Properties of State Graphs 



In this chapter, we further explore two important properties of state graphs called live- 
ness and persistency. They are important because they correspond to the properties of 
deadlock-free and hazard-free in the circuit implementations of state graphs. Since we have 
established the equivalence between STGs and a class of state graphs, we can characterize 
these properties in terms of STGs; these will appear as syntactic conditions on STGs. 
Liveness will be considered in Section 1 as it is the simpler to derive of the two properties. 
Section 2 discusses persistency and its corresponding characterization in STGs. Section 3 
describes a problem related to state asssignment and a remedy for this problem. 

5.1 Liveness 

As discussed in Chapter 2, we will be using a rather restrictive notion of liveness for state 
graphs. Simply a state graph is live iff it is strongly connected, and each transition is 
enabled in some state of the state graph. This implies that every state reachable from the 
initial state of the system is reproducible, i.e. the set of states form an equivalent class in 
which every two states are mutually reachable. This notion of liveness implies that every 
transition in the circuit can be enabled infinitely often because it is enabled in at least one 
state which can be reached from any other state of the circuit. 

Definition 5.1 (Liveness of state graphs) A state graph defined on a set of signal J, 
$j = (5, T, 8, sq), is live iff it is strongly connected and for each t € T, there exists s G [sq) 
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such that s[t). 

In state graphs, states and transitions are intimately related, as they represent binary 
values and transitions of the same set of signals of a control circuit, respectively. In Section 
4.2, we discussed a property of state graphs which requires that every triple (3, t, s'), where 
s[t)s', be consistent. A live state graph must be strongly connected and must have a 
consistent state assignment. 

Based on this definition, the condition on a STG such that its state graph is live can 
be derived easily. A STG satisfying this liveness condition will simply be called live. Let 
Ej denote a STG and I! its uninterpreted net. Then the state graph $j of Ej is obtained 
by performing state assignment on the finite automaton $ derived from the net E. For 
the state graph $j to be live, it must be strongly connected and have a consistent state 
assignment. $j is strongly connected iff E is a live-safe net; furthermore, because the 
largest class of nets considered is FC nets, E has to be a LSFC net. 

The preceding argument simply states that a STG is five iff it is well-formed and its 
state graph has a consistent state assignment. This establishes the following theorem 

Theorem 5.2 (Liveness condition for STGs) Let Ej be a STG and E its uninter- 
preted net. Then Ej is live iff 

• E is a live-safe free-choice net, and 

• In Ej, every pair of transitions t,i is ordered. (This is precisely the condition for the 
state graph o/Ej to have a consistent state assignment, as stated in Theorem 4.8.) 



5.2 Persistency 

Persistency one of the most important properties of state graphs, as it is the essential 
property of speed-independent circuits. In Section 2.3, we have briefly discussed this 
property and its equivalent characterization in STGs. In this section, we will go into detail 
of how this equivalence is established. 
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First, we define the concepts of enabling and disabling between transitions in unin- 
terpreted finite automata. These general concepts apply to all interpreted FA, including 
reachability graphs and state graphs. Let {S,T,6,s ) be a FA, where 5 denotes a set 
of states and T a set of transitions, both with no particular interpretation. Also let 
Te(s) = {t | s[t)} denote the set of transitions enabled in a state s G S. 

• In state s, t enables t' (denoted as tEt') iff 3s' e S : s[t)s'[t') A *' £ T E (s) A t & T E (s') 
(Fig. 5.1a). 

• In state s, t disables t' (denoted as tDt') iff 3s' E S : s[t)s' A s[t') A t' & T E (s') 
(Fig. 5.1b). 

Simply, tEt' in s means that the occurrence of t in state s brings the system to another 
state s' in which t' is enabled; tDt' in s means that the occurrence of t in state s — in which 
t' is also enabled — brings the system to another state s' in which t' is no longer enabled. 
We also use tEt' and tDt' to denote -i(tEt') and ->(tDt'), respectively. Using this notation, 
the situation in Fig. 5.1b can be denoted as tDt' A t'Dt. 

Generally, in a FA, some transition may have several appearances (instances). Further- 
more there are a variety of ways two transitions may interact with each other. For example, 
there may be instances of transitions t and t' such that tEt' in some state s, and other 
instances such that tDt' in some other state s'. However, for FA generated from LSFC 
nets and STGs, we have established their equivalence in Theorem 3.17, which indicates 
that any situation in a FA has a corresponding characterization in a net. For example, if 
tRt' (where R is the causal relation defined in Chapters 2 and 4) in a LSFC net then in 
its FA, an equivalent instance of tEt! must exist, and further there can be no instance of 
tDt'. The above result is formally stated as follows. Let I! = (P, T, F, M ) be a LSFC net 
and $ = (5, T, 6, s ) its FA. Then for every t, t' G T : tRt' in 23 & (3s e S : tEt' in $). 

5.2.1 Definition of Persistency 

The property of persistency is defined differently for uninterpreted and interpreted FA— the 
latter being state graphs. The reason is that in state graphs, transitions are divided into 
those of input and non-input signals, whereas no such distinction exists for uninterpreted 
FA. 
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Figure 5.1: (a) An instance of t enables t' in s. (b) An instance of t disables t' in 5. Dotted 
arcs are used to indicate transitions which cannot occur in certain states. 

For uninterpreted FA, a transition is said to be persistent if none of its instances in a 
finite automaton is ever disabled by any other transition; otherwise, it is non-persistent. 
For example, transition t in Fig. 5.1b is persistent, while t' is non-persistent. 

For state graphs, the above definition applies only to transitions of non-input signals; 
transitions of input signals are always assumed to be persistent. This assumption is based 
on a property of state graphs called the external persistency property, the justification for 
which will be given shortly. 

Definition 5.3 (Persistency in State Graphs) In a state graph $j = (S,T,8,s ): 

• Every t e Tj is persistent. 

• t G T NI is persistent iff Vs,s' G 5,Vt' € T : s[t) A sites' =$► s'[t); otherwise, t is 
non-persistent . 

• $j is persistent iff every transition in T is persistent. 

An immediate implication of the external persistency property is that it permits the speci- 
fication of input choices in a state graph. Fig. 5.2b shows an example with an input choice 
between transitions a + and 6 + , the corresponding circuit is shown in Fig. 5.2a. 

Justification for the External Persistency Property. This intuitive property indeed 
has a logical justification which is based on the relationship between states and transitions 
in a state graph. In Fig. 5.2b, states are vectors containing the binary values of signals in 
(a, 6, c,d,e,f). From state si = 000000, the firing of transition c + brings the circuit to state 
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Figure 5.2: (a) A control circuit with an input choice involving signal a, b and (b) part of its 
state graph, (c) Part of the state graph of the circuit, taken together with its environment. 
Contraction of the state graph in (b) involves: (d) removing unwanted transitions a+ , b+ , / + 
and (e) contract the state graph. 
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s 2 = 001000, in which both a+ and 6+ are enabled. Since a and b are external signal, it can 
be assumed that the environment has additional knowledge to deterministically choose 
only one of their transitions to fire. This assumption is justifiable as the environment 
must have enough information to recognize that a + and 6+ are not in really enabled in 
the same state, even though this is how it appears to the circuit. That is, if the circuit 
and the environment are taken together as a system, then additional signals must exist 
in the environment such that states s-i and s 2 can be "split" into {s£,.s"} and {s^s'?}, as 
shown in Fig. 5.2c. Thus, in the more complete system consisting of the original one and 
its environment, a+ and b + are in fact not enabled in the same state as it appeared in the 
original one. 

This fundamental relationship between states and transitions in a state graph is also 
the basis for a method of decomposition called contraction. It rests on the same principle 
which relates states and transitions, but instead of considering a system together with its 
environment, a subcomponent of the system is isolated and its behavior extracted from that 
of the original state graph. For example, if one is interested in the component consisting 
only of signals {c, d, e} of the circuit in Fig. 5.2a, then a state graph describing its behavior 
can be derived from in the state graph in Fig. 5.2b as follows. Since other signals {a, b, /} 
do not belong to this subcomponent, their transitions can be removed from the state graph; 
this is done by replacing them with e (the silent transition) as indicated in Fig. 5. 2d. Now 
each state in the resulting state graph is reduced to a vector of (c, d, c) . The result is that 
states connected by e-transitions will have identical binary representations, because these 
e are transitions of signals which do not belong to this subcomponent. Therefore, they can 
be collapsed together into one state, as indicated in Fig. 5.2e. In this state graph of the 
subcomponent, d+ and e+ will appear as if they represent an external choice, because they 
are enabled in the same state. The external persistency property dictates that they are 
persistent, as it is indeed the case. The subject of decomposition using contraction is an 
important aspect of our synthesis approach. It is discussed in further detail in Chapter 6. 

In summary, the external persistency property has two important consequences: (i) 
transitions of input signals to a control circuit module can always be assumed to be per- 
sistent, and (ii) input signals to a logic element within a module can be assumed likewise. 

In the design of self-timed control circuit, the notion of persistency is fundamental as it 
is the essential property of speed-independent circuits. Chapter 4 shows that from a state 
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graph, one can define a network function which gives a logic implementation of a digital 
circuit. This leads to the definition of speed-independence. 

Definition 5.4 (Speed-independence) Let $j = (S,T, 6,s ) be a state graph defined 
over a set of signals J, and f : S x J — ♦ {0,1} the network function derived from $j. 
Then the logic circuit which implements f is speed-independent iff every transition t € T 
is persistent. 

Thus one important consideration in specifying behaviors of speed-independent circuits is 
to guarantee that all transitions in a STG specification are persistent. 

5.2.2 Characterization of Persistency in STGs 

We have defined the property of persistency in state graphs. Below we give its char- 
acterization in STGs. First we present this syntactic characterization and then give its 
justification. 

Non-persistency in STGs 

Fig. 5.3a illustrates a case with u being non-persistent in a state s; it is disabled by a 
transition t. Using previous notations, this is written as: tDu A uDt. The equivalent 
characterization in STG is given in Fig. 5.3b, in which t, u are concurrent and i causes u. 1 
As explained in Chapter 2, this non-persistency is the result of the interaction of concurrent 
signal transitions. Intuitively, the course of action iRu can be implemented by a logic 
element with input * and output j, where t — i* and u = j m . Concurrency between u and t 
implies that while the logic element is reacting to transition t of signal i to cause transition 
u of output j, another transition t of i may be occurring simultaneously at the input of logic 
element j (Fig. 5.3c). This is commonly known as a race condition in hardware circuits 
and can lead to malfunction. Thus, we have the following syntactic characterization of 



x Note the difference between this characterization of non-persistency for STGs and that for LSFC nets. In 
the latter, a transition t is non-persistent only if it is an output transition of a free-choice place. Furthermore, 
in a LSFC net, if tDu then uDt and vice versa, because in this case, both t and u must share the same input 
place. 
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non-persistency in STGs. Recall that T NI denotes the subset of transitions of non-input 
signals. 

Theorem 5.5 (Non-persistency in STGs) Let Sj = {P,T,F,M ) be a live STG and 
$j = {S,T,6,s ) its state graph. Then forteT and u G TsV 

(3s eS: tDu A uDt) & {tRu A {t, u} G co). 

The proof of this theorem is based on a property of state graph called input- causing- output, 
which states that i is an input signal to logic element j iff some transition of i enables or 
disables some transition of j. Let /(;') denote the set of input signals to a logic element 
whose output is j; I(j) is called the input set of j. Formally, the input- causing- output 
property states that: 

» € I(j) & (i.Ej.) V (i.Dj m ). 

First, we discuss the proof of the above theorem, then we will give an explanation of this 
property. 

Proof. Let t = i* and u = j m . (<=) If there is no interaction due to the causal relationship 
between transitions of signals i and j then the condition {<,«} G co implies 3s G S : 
s[u)s"[t) A s[t)s'[u). We argue that due to the causal relation tRu, the condition {t, u} G co 
implies 3s G S : s[u)s"[t) A s[t)s' but not s'[u); i.e. « cannot be enabled in s' or 
equivalently, tDu. 

According to a result developed earlier in this section, the condition iRu implies that 
iEu. Furthermore according to the input- causing- output property, it also implies that i is 
an input to logic element j. Since the STG is live, t and t are ordered and hence t must 
fire some time after t. Also, since t and u are concurrent, there must be a state s in which 
both t and u are enabled. At s, the firing of t must disable u because u are enabled by t 
and the firing of t changes the state which results from the firing of i. 

(=>■) Since there exists a state s in which both t and « are enabled, it follows that either 
they are concurrent or in direct-conflict. If they are in direct-conflict then tDu A uDt. 
However, since we have tDu A uDt, this is not the case, hence {t,u} G co. Furthermore, 
according to the input- causing- output property, tDu =>• i G I(j) => either tRu or tRu. But 
since both t and u are enabled in state s, it cannot be the case that tRu. Hence it must 
be that tRu. Thus, we have {*, u) G co A tRu. I 
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Figure 5.3: Characterization of non-persistency in (a) a state graph, (b) its STG and (c) 
as hazards in the hardware circuit. The persistency constraint (shown as a bold arrow) 
in (e) eliminates non-persistency from the state graph (d); harzard is eliminated from the 
hardware circuit (f). Note that t = i m and u = j m . 
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The Input-causing-Output Property. This property reflects the way hardware cir- 
cuits behave; it is based on the fact that two transitions can enable or disable each other if 
and only if one is the input to the other. For every signal j € J, let I(j) denote the set of 
input signals to logic element j. In the following, we give an explanation of this property 
and show that the input set I(j), as defined above, is indeed equivalent to {i 6 J \ i m Rj,}, 
the set of signals whose transitions cause those of j in a STG. This equivalence is the key 
to our decomposition technique introduced in Chapter 6. 

The input- causing- output property states that Vi 6 J,Vj G Jni (J is the set of signals): 
i G I(j) <& 3s e S : i*Ej m V i m Dj m in s. Let t = t, and « = j m . The =* direction is obvious: 
if transitions of i cannot enable or disable those of j then i can be eliminated from the set 
of input signals to logic element j. 

i G I(j) <*= tEu. Again, consider Fig. 5.1a, in which s[t}s'[u). Note that i is the only 
signal which changes in going from s to s'. Since u is not enabled in s but it is in s', u 
must have been disabled due to the transition of signal i. This is possible only if i is an 
input to logic element j. 

i G I(j) <= tDu. In Fig. 5.1b, there exist states s, s', s" such that s[t)s' and s[u)s", but 
« £ Te(s'). In state s transition u is enabled, but in s', it is not. Since the only signal 
which changes going from s to s' is i, u must have been disabled by the transition of signal 
i. This this is only possible if signal i is an input to the logic element ;'. | 

An implication of the above property is the equality I(j) = {i e J \ i*Rj*}, which can 
be derived as follows. Recall that I(j) denotes the input set of logic element j. 

From the above characterization of non-persistency, (3s G 5 : tDu A uDt) & (tRu A 
{t, u} E co), it is evident that the condition for a transition t to disable another transition 
u is that t causes u. Let t = i„ and u = j m , then tDu ^ i*Dj m and iRu & i,Ej,. Hence 
we have i„Ej* => i m Dj m . From the input causing output property, we have that since 
i.Ej. =► i m Dj m : I(j) = {i E J \ i.Ej*} = {i € J \ i m Rj.}. 



A syntactic condition for persistency in STGs: the Persistency constraint 

There are two mechanisms which give rise to non-persistency. One of which has been char- 
acterized above; it arises due to the interaction of concurrent signal transitions which are 
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parts of the sequencing specification. This violation of persistency can always be eliminated 
by introducing additional ordering constraints into the specification. Such constraints are 
called persistency constraints and are discussed below. The other type of non-persistency 
is a by-product of the state assignment process, and can only be eliminated by introduc- 
ing additional bits to differentiate supposedly distinct states, as will be discussed in more 
detail in the next section. 

As illustrated in Fig. 5.3a, transition u is non-persistent as it is caused by t, but at the 
same time it is concurrent with t. In order to eliminate non-persistency in this case, we can 
introduce an ordering constraint between u and t so that they are no longer concurrent; 
this is shown in Fig. 5.3e as the bold arrow, and it is called a persistency constraint. In 
its state graph (Fig. 5.3d), u becomes persistent because no instance of t can disable it. 
In the hardware implementation, the introduction of a persistency constraint corresponds 
to adding a feedback signal from the output j to the input of logic element i, as shown in 
Fig. 5.3e. We can formalize this as follows. 

In Sj, let R C T x T denote the causal relation. An .R-path is defined as a simple path 
tiRt 2 R. . . Rt n , for t t ; € T, 1 < i < n and t\ ^ t n . Then R + denotes the transitive closure 
of R, i.e., Vx, y € T : xR + y -&■ 3f?-path from x to y. Since Sj is strongly connected, R + 
is not a particularly useful concept, for Vx, y € T : xR+y A yR+x. Hence, we define the 
following directed transitive closure i?" : 

Vx, y G T(x ^ y) : xR*y iff there exists an R-path from x to y which does not contain 

y- 

The existence of an R-path from x to y will be depicted graphically as x — * p y. 

Definition 5.6 (Persistency Constraints) Let Sj be a STG as defined earlier. Then 
Vx € T, Vt/ G Tf^j such that xRy: the R-path such that yR*x is called a persistency 
constraint. 

It can be seen that the presence of a persistency constraint creates a simple cycle which 
contains x,x and y so that they are ordered. Using in conjunction with the external 
persistency property, persistency constraints provide the condition on STGs such that 
their state graphs are persistent. An STG satisfying this condition will be simply called a 
persistent STG. 



94 CHAPTER 5. PROPERTIES OF STATE GRAPHS 

Theorem 5.7 Let Ej = {P,T,F,M ) be a STG. Then Sj is persistent iff 

Vx e T, Vy € T NI : xRy =* yR*x. 

5.3 A problem with state-assignment 

As mentioned earlier, non-persistency may sometimes arise in a state graph due to state 
assignments. Nevertheless, we do not incorporate this latter phenomenon into Theorem 5.7 
because it is a by-product of state assignments and is by no means related to the required 
sequencing specification of a STG. In Section 2.5, we have introduced this problem. In 
this section, we discuss it in more detail. 

We generalize the example presented in Section 2.5 to STGs corresponding to marked 
graphs and LSFC nets. Let S = (P,T,F,M ) be a LS marked graph and C,C be cuts 
in S. Then the interval between two cuts, denoted by [C, C% is defined as the subset of 
PUT which belongs to all simple paths from an element in C to one in C": 

[C,C'} d Zl {x€PUT|xe path yi y 2 ...y n , 
yi€C,y 2 €C", 

Vi ¥= Vi, for 1 < i ^ j < n 
and y,-, y, e P U T} 

An example of an interval between p-cuts C p and C' p is shown in Fig. 5.4a, where 
C p = {{x,ii) t (x, t 3 )} and C p = {(*, t 3 ), (t 2 , t 4 ), (* 2 , y)}. It can be seen that [C p , C' p ] n T = 

In a STG, a complementary set B CT is defined such that Va: € T : x G B <& x € B. 
That is, B contains both the rising and falling transitions of a signal. In a live STG 
corresponding to a marked graph, for every p-cut C p , [C p , C p ] forms a complementary set. 
Then the state assignment problem arises if the following conditions are true in the STG, 
as illustrated below. 

In Fig. 5.4b, markings M and M' correspond to p-cuts C p and C' p , respectively. Since 
[ C P-> Cp] forms a complementary set, from the binary state s corresponding to M , the firing 
sequence M2M2 leads to a binary state s' which is identical to 3. Thus in the state graph, 
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any transition enabled in state s is also enabled in s', and vice versa. In Fig. 5.4b, if t x is 
a transition of a non-input signal, it may oscillate as long as t 3 has not occurred. 

On the other hand, the interval [C pl , C' pl ] also forms a complementary set, causing the 
markings M 1 and M{ (corresponding to C pX and C pl , respectively) to have the same binary 
representation. Hence in the state graph, there is a binary state in which both t x and t 4 are 
enabled. If either <i or t 4 is a transition of a non-input signal, non-persitency will result. 

In the following lemma, for sets A and B, A -r B denotes their symmetric difference: 

A + B = (A-B)\J(B-A) = A\JB-AnB. 

Lemma 5.8 Let Ej = (P, T, F, M ) be a STG whose uninterpreted net is a LS marked 
graph. Then Ej has a state assignment problem if there exist distinct p-cuts C p , C and 
transition t 6 T^i such that 

(a) [C p , C' p ] forms a complementary set, and 

(b) te(c p - -re;-) a -*cc p uc; 

Proof. Let M, M' € [M ) denote the marking under which C p and C' p are marked, re- 
spectively. Consider any firing sequence a € T* such that M[a)M', then a must fire all 
transitions in [C p ,C' p ]. Let s,s' be binary representations of M,M\ respectively; s and 
s' are states in $j. Since [C p , C' p ] forms a complementary set, if a contains transitions x 
then it must also contain x. Hence s = s' and thus every transition t such that -t C C p or 
•* Q C' is enabled in s. There are two cases: 



v 



• if transition * belongs to C p ■ C\C' p - then it is enabled in both markings M and M'. 
Hence the fact that M and M' have the same binary state cannot cause any problem. 

• Therefore, only in case t G (C p • -C' p -) U (C p ■ -C p -) that t is enabled in one marking 
but not the other. Thus if both markings have the same binary representation, t will 
be enabled in some state which it is not supposed to. If t e T m then Sj has a state 
assignment problem. | 

This result generalizes directly to STGs which are LSFC nets. As discussed in Chapter 
3, Theorem 3.6 states that in a LSFC net, every MG-component can operate indepen- 
dently in its subset of live-safe markings. Hence for LSFC nets, the above conditions for 
persistency must be satisfied by every MG-component of the net. 
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Figure 5.4: (a) A part of a marked graph with p-cuts resulting in non-persistency due to 
state assignment and (b) its state graph. Note that markings M and M' have the same 
binary representation. 



Theorem 5.9 Let £j = (P, T, F, Mo) be a STG. Then Sj has a state assignment problem 

if there exist distinct p-cuts C p , C' p in some MG- component and a transition t € Tnj such 

that 

(a) [C p , C' p ] forms a complementary set and 

(b) t£(c p - -=- c p -) a -<cc p uc; 



Chapter 6 

Decomposition by Net Contraction 



This chapter develops one major result for the structure theory of nets. It discusses 
a novel method of decomposition of finite automata, using a graph-theoretic technique 
called contraction. We are only concerned with finite automata which are derived from 
LSFC nets, and for convenience, they will be referred to simply as FA in this chapter. 
This method does not decompose the FA directly; instead, it contracts the nets to produce 
smaller ones and then generates FA for these smaller nets. 

The purpose of decomposition of FA is to facilitate analysis and synthesis of systems 
in an effective manner. One specific application of decomposition is in the implementation 
of control circuits. Efficient implementations can be obtained by decomposing the state 
graphs to minimize the interaction between variables corresponding to signals of the circuit. 
For state graphs (which are FA derived from STGs) there is a straightforward method of 
decomposition based on the causal relation in the STGs. STGs and state graphs can 
be decomposed by performing contraction on them to produce a number of contracted 
graphs; each of which contains the minimum amount of information required for the correct 
implementation of each signal in the circuit. 

As explained earlier, we are mainly interested in the behavior of nets as given by sets of 
transition sequences. From this viewpoint, an abstraction of net behavior basically involves 
the removal of unwanted transitions from the sequences. Hence, our abstraction method 
will involve contracting a net by eliminating unwanted transitions from it. 

In Section 1, we describe two contraction algorithms, one for Petri nets and one for finite 
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automata corresponding to reachability graphs. An example will be given to illustrate the 
operations involved in these algorithms. In Section 2, we study the conditions under which 
certain properties of nets are preserved. These include live and safe-ness, and a property 
called tr-preserving, indicating the preservation of the temporal relation in contracted 
nets. In Section 3, we develop a major result which establish the equivalence between the 
behavior of a set of contracted nets and the behavior of the original net. In Section 4, these 
net-theoretic results are applied to STGs to provide a simple method for decomposition of 
state graphs, from which highly efficient implementations can be obtained. 

It is important to note that these results only apply to nets which satisfy all the re- 
strictions of structure theory stated so far in the thesis. To recapitulate, these restrictions 
on nets consist of the following: (i) finiteness and safeness (ii) the use of unlabeled transi- 
tion sequences and (Hi) the one-token SM restriction. The most important of these is the 
one-token restriction because, as discussed in Chapters 2 and 3, the temporal relation can 
only be defined for nets satisfying this restriction. In this chapter, all results developed 
are based on this restriction. 



6.1 Contraction Algorithms 
6.1.1 Contraction of Petri nets 

In this section, we describe contraction algorithms for free-choice nets and their FA. The 
essential idea in these algorithms is to consider only the subset of transitions of direct 
interest and ignore the rest. A contracted net contains only transitions of interest, and 
other transitions are eliminated by performing "local surgery" to remove one transition 
at a time. It should be stressed that contraction is different from reduction of nets for 
obtaining component subnets as described earlier in Chapter 2. 

Let E = (P,T,F,M ) be a LSFC net, V C T be the subset of transitions of interest. 
Then E/T" denotes the T'-contracted net of E. In the following contraction algorithm, the 
set X = T-T will be eliminated from E, resulting in E' = E/T'. The algorithm eliminates 
one transition in A" at a time and is applied iteratively to the net until all transitions in X 
are removed. In each iteration, the elimination of a transition t e E X only affects places 
in -t e U t e - and arcs connected to these places, the rest of the net remains unchanged. 
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Algorithm 6.1 (Net contraction) Let E = (P,T,F,Af ) be a net and T = T - {< e }. 
The T' -contracted net o/E, E' = (P',T',F',M'q) is obtained as follows. 

(a) Collapse input and output places oft e to create a new set of places P': 
Let P' = -t e x U-, i.e., Vp,- e -t e \/pj G t e - : let p' = {pi,Pj} G P'. 

(b) Redefine the flow relation between these new places and the rest of the net: 

Vp, G p'(G P') if 3t G V : (t,pi) G F then <*,p') € F', 
y Pj G p'(G P') */ 3* G T : (p j5 t)6F **e» (p', t> G F'. 

(c) Replace the remaining part of the net- 
Add Pi = p- (-t e u t e -) to p'. Add f n (p t x r u r x Pj) to f'. 

(c?) Determine the new initial marking: Vp' G P' : Mq(p') = 5Zp€p' -^o(p)- 

Some examples of net contraction are given in Fig. 6.5, where (a) is a contraction on 
a part of a marked graph, (b) a state machine and (c) a free-choice net. Note that a 
contracted net of a free-choice net may no longer satisfy the free-choice axiom; however, it 
is still behaviorally equivalent to a free-choice net. Even though we trust that the results 
developed here also apply to these nets which are non-FC (but behaviorally FC, and the 
like), to avoid net-theoretic difficulties, we will require that contraction be only applied to 
transitions which do not create non-FC structures in contracted nets. 



Notes. After every iteration of the algorithm, the contracted net E' must be checked 
for place-simple- and pure-nessi If there exist distinct places px and pj in E' such that 
(•Pi = -pi) A (pi- = p2-)j then it is legitimate to remove either pi or p? to make E' simple. 
If there exist a transition t and a place p in E' such that p- = {<} and -p = {t}, then 
the self-loop containing p, t can be ehminated by removing p, thus keeping the contracted 
net pure. This is also a legitimate operation because p is connected only to t and no 
other transition; p is often called a side condition. On the other hand, place p cannot be 
eliminated if it has other input or output transitions different from t. In which case the 
resulting contracted net is impure. Hence, even if the original net E is pure, E' may not be. 
Below we provide some restrictions on the contraction algorithm so that these undesirable 
situations will not occur. 
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Figure 6.1: Examples of contraction on (a) a marked graph, (b) a state machine and (c) a 
free-choice net. 

Restriction 6.2 (on net contraction) In the above contraction algorithm, a transition 
t e can be eliminated only if it satisfies the following conditions. 

(a) No place p G (-t e U i e -) can be an input place of transition t G -(-t e ) (Fig. 6.2 a): 

Vt G ■(•*«) : P G (-t e U t e -) =► P £ •*, 

(b) No place p' G (-t e U t e -) can be an output place of transition f G (t e -)- (Fig. 6.2b): 

Vt' G (<«•)• : P' G (■*« U t c -) => f/ ^ t' • . 



It is easy to verify that these situtations create either impurities or deadlocks in con- 
tracted nets and hence should not be allowed. In the above algorithm, if there exists a 
place pi G -t e such that p,- is also an input place of t G -(-t e ), then since the net is safe, 
this leads to a deadlock. On the other hand, if there exists a place pj G t e - such that pj is 
also an input place of t G -(-te), then the path tpit e pjt exists (where p,- G t • D • t e ). After t e 
is eliminated, there will be a self-loop tp't where p' = {pi,Pj}, resutling in an impure net. 
As a matter of fact, these situations are so unnatural that it is reasonable to put forth 
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Figure 6.2: Elimination of t e is disallowed if some input or output place of t e is also (a) 
input place of t or (b) output place of t'. The dashed arcs are those causing these violations. 



an additional requirement for nets, which is that all transitions in a net satisfy the above 
restriction. 



6.1.2 Contraction of Finite Automata 

An example has been given in Chapter 5 (in the subsection entitled "Justification for the 
External Persistency Property") to illustrate the main idea behind contractions of state 
graphs. Below, we consider contraction in more general terms as applied to uninterpreted 
FA. One can define a contraction on FA by restricting the set of transitions to a subset 
of interest and replacing the rest with e, the silent transition. In general, since a FA 
may have more than one instance of any transition, such an operation on FA may result in 
nondeterminism in the contracted FA if there is a state with more than one emanating arcs, 
each labeled with the same transition (including the silent transition e). For the purpose 
of implementation, we are only interested in systems whose behaviors are described by 
deterministic finite automata. Hence these nondeterministic FA need to be converted 
to deterministic ones. Instead of using common method such as the subset construction 
method to produce a deterministic automaton, we use the following two simple rules which 
are actually properties of the transition function of state graphs. They have been discussed 
informally before in Chapter 5, and are stated in formal terms below. Let $ = (5", T, 8, s , q) 
be a FA, then it is required that 



(a) Vs, s' e S, Vr € T U {e} : (s' = S(s, t)At = e) «*■ s = s'. 
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Figure 6.3: Illustration of rules for contraction of FA. 
(b) Vs^s^s'^s't € 5,V<!,t 2 eT:s[ = 6(s u ti) A a' 3 = 8{s 2 ,t 2 ) A (h = t 2 ) =» («i = a 2 •«> 

Rule (a) states that if two states are connected by a e-transition, then they can be collapsed 
into one "super-state" (Fig. 6.3a). Rule (b) can be rephrased as two sub-rules: if (i) si — s 2 
and t\ — t 2 then s[,s 2 must be the same and can be collapsed into one state (Fig. 6.3b); 
similarly, if (ii) s[ = s 2 and t\ = tf 2 then si,s 2 must be the same and can be collapsed 
into one state (Fig. 6.3c). The reasoning behind these rules has been described in Chapter 
5: silent transitions correspond to transitions of signals not considered in the state of the 
module of interest and hence, they are eliminated from the state vectors. 

In a nondeterministic FA (5, T, A, s , q) where AC5x(TU {e}) x 5, we say that an 
e-path exists from state si to s n , denoted as Sx[e . . . e)s m if there exists a path 3iS 2 ...s n 
such that {si, e, s, + i) €E A, 1 < i < n. Note that Vs £ S : s[e)s and hence there is always 
a zero-length e-path from any state s to itself. In the following algorithm, let $ and $/T' 
denote a FA and its T'-contracted FA. The idea of the algorithm is to replace transitions 
to be removed with e and then collapsed states connected by e-paths into a super-state; 
nondeterminism can be resolved by applying the above rules; the new initial state will be 
one which contains the original initial state. In contrast to the contraction algorithm for 
nets which removes one transition at a time, the algorithm for FA involves the removal of 
all instances of a transition. The simple reason for this difference is that in a net, each 
transition in T is required to have exactly one appearance, whereas in a FA, it can appear 
many times. 



Algorithm 6.3 (Contraction of Finite Automata) Let $ = {S, T, 6, s , q) and T' C 
T. The T'-contracted FA o/*, *' = $/T' = (5', T, 8', s' , q'), is obtained as follows. 
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(a) Relabel unwanted transitions with e: let AC S x (TU {e}) x 5 -suc/i //ia< 

V*yeS,V*€T :$(*,<) = *' =► (s,t\T',s')€ A. 

(6) Collapse into a superstate all states connected with e- paths: Va 1 ,s 2 G S such that 
si[e...e)s 3 or s 2 [e...e)s 1 , define s' € 5' (C V(S), the power set of S) such that 
ai,s 2 € s'. 

(c) Redefine transition relation: Define A'C5'xT'x 5' such that Vs e S,Vt e T: 

(Bsi es' eS': (s, t, Si ) e A) => (s, t, 3'} € A' 
(3si E s' 6 5" : &, t, s) € A) =► (3', t, s) € A'. 

(d) Resolve nondeterminism: V* € T',Vsi,s 2 , 3i,3 2 G 5' : 

((^MDeA'A^.M^A') =* (3i = 3 2 & s[ = 3 2 ). 

(e) The new transition function is obtained as follows. Define 6' : S' x T" — ► S' such that 

Vs, s' € S', Vt 6 T : (3, t, 3') € A' =► 6' (a, t) = 3'. 

ITie new initial state and the new set of final states are 

s' = s'€S'ifs es', 

q' = {s'eS'ls'nq^V)}. 

An example. Fig. 6.4a and Fig. 6.4b are a live-safe marked graph and its state graph, 
where T = {t , t x , . . . , t 8 , t 9 }. For the sake of clarity, places are not drawn explicitly. By 
performing T'-contraction, where T' — T - {t 2 ,t 6 }, the net is contracted to one shown in 
Fig. 6.4c. The removal of transition tf 6 results in the replacement of four old places by four 
new ones. Similarly, the removal of t 2 causes places (*i, < 2 ) and (t 2 , t 4 ) to be collapsed into 
a new place (<i, t 4 ). 

The state graph of Fig. 6.4a is given in b. By performing T'-contraction on this state 
graph, a new one is obtained as shown in Fig. 6.4d. The operation involves replacing t 2 and 
<$ with silent transitions e and then collapsing states connected by e-transitions together. 
Note that the contracted state graph in Fig. 6.4d is also the state graph of the contracted 
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Figure 6.4: (a) Contraction on this FC net yields (c). (b) Contraction of this state graph 
yields (d). In this example, (d) is also the state graph of (c). 



net in Fig. 6.4c. Thus in abstracting the behavior of a net, one can choose either the path 
a-b-d or a-c-d. In generally, the latter path is computationally more efficient because a 
net always contains no more transitions than its state graph. In this example, contraction 
on the net requires the removal of two transitions, while contraction on the state graph 
requires four (three instances of < 2 , one of < 6 ). In the next section, we will examine the 
conditions such that both paths yield the same state graph. By satisfying this condition, 
one can choose the more efficient path a-c-d most of the time. 
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6.2 Properties of Contraction 

Not every subset T'CT yields a useful or even meaningful contraction on a net. We need 
to choose subsets with restrictions such that the contracted net preserves certain impor- 
tant properties of the original net. We will study the conditions under which contraction 
preserves live and safe-ness and the temporal relation on remaining transitions of a con- 
tracted net. Due to the level of complexity involved, we will consider separate cases for 
state machines, marked graphs and lastly, free-choice nets. 

In the following, let E = (P, T, F, M ) be a LSFC net, E' = (P', T', F', Jli£) = E/T' be 
the T'-contracted net of E. First we introduce the notion of preservation of the temporal 
relation called tr-preserving. 

Definition 6.4 Let E be a LSFC net satisfying the one-token SM restriction, and E' = 
E/T' be its T'-contracted net. Let tr = liUcoUcf and tr 7 = li'Uco'Ucf be the temporal 
relations in E and E', respectively. Then the T' -contraction on E is tr-preserving iff 
li'Cli A co'Cco A cf'Ccf. 

Note that this definition does not require that direct conflicts be preserved. The reason for 
this is related to the way one defines the boundary of a control circuit module, as explained 
in Chapter 5. 

Below, the condition for tr-preservation for state machines is derived. The removal of 
transition t e from a state machine will affect only two places: the input and output places 
of t e , because in state machines each transition has exactly one input and one output place 
(Fig. 6.5). 

Lemma 6.5 Let E be a live-safe state machine, E' be its T'-contracted net, V = T -{<«.}. 
Let {pi} = -t e and {pj} = t e -, then the T' -contraction on E is tr-preserving iff 

\ Pi -\ = l V |-fc-| = l. 

This lemma essentially requires that the input place of the removed transition have exactly 
one output transition, or its output have exactly one input transition. If both places violate 
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this condition (Fig. 6.5a) then the removal of t e results in a net in which the temporal 
relation no longer preserves (Fig. 6.5b). 

Proof. First, note that since t e has only one input and one output place, the removal of t e 
results in merging these two places into a new one. Hence if E be a live-safe state machine 
then E' is also a live-safe state machine because E' is strongly connected and contains 
exactly one token. 

(=>) Suppose that 3*,-, tj G T : p t - = {t e , *,} A -pj = {t e , tj] (Fig. 6.5), we show that 
li' £ li and cf ' <£ cf . 

If {U,tj} G cf then there exists no simple cycle in E containing both U,tj. In E', 
Pi and pj are collapsed into p' = {pi,Pj} and we have {tj,p'), (p 7 ,*,) G F'. Since E' is 
strongly connected, there must be a simple cycle containing both <„*_,, i.e. {<;,!,} G li' or 
{ti,tj} $ cf. Hence cf £ cf. 

If {ti, tj} € li then there exists a simple cycle in E containing both <,-, tj. There must 
be a simple path n' from pj to p, because E is live. Because *, and tj are contained in a 
simple cycle, there must be another simple path n from U to tj which does not intersect 
n': n and n' form such a simple cycle (Fig. 6.5a). Let t(^ U) € n and t'& tj) G W, then 
it is also true that {*, t'} € li. In E', p, and pj are collapsed into a new place p' (Fig. 6.5b) 
and t, t' no longer belong to the same simple cycle. Hence {<, t'} € cf , or {t, t'} # li'. So 
li' gt li. Note further that a new firing sequence . . . tjU ... is introduced in E'. 

(4=) It can be verified easily that if either p,- = {t e } or -pj = {t e } then the collapsing 
of pi and pj in a new place does not affect the relation between any two transitions. Thus 
li' C H and cf C cf . | 

The condition for tr-preservation for marked graphs is more complicated due to the 
fact that every transition in a marked graph may have more than one input and output 
places. 



Lemma 6.6 Let E be a live-safe marked graph satisfying the one-token SM restriction, 
E' be its T '-contracted net, T' = T - {t e }. Then T'- contraction on E is tr-preserving iff 
V*,- G '(-te), V<j G (t e -)-, there exist simple cycles fi x = tf,-p,i e ...*,• and ft 2 = *j • • • t e pjtj such 
that \Qx n ft 2 | > 1 (Fig- 6.6a). 
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Figure 6.5: Proof of Lemma 6.5. (a) A state machine E with p r = {t e , U} and -pj = {t e ,tj}. 
(b) The state machine £', resulted from collapsing p, and pj into p'. 



Essentially, the above lemma states that T'-contraction is tr-preserving iff there exists 
a pair of simple cycles — one containing U,t e , the other tj,t e — which intersect at another 
transition different from t e . Fig. 6.6a shows a marked graph which violates this condition: 
the cycles fl x and Q 2 intersect at only one transition t e . In which case, the removal of t e 
creates a new simple cycle (Fig. 6.6b) which totally alters the temporal relation. Since 
places in a marked graphs are uniquely identified by their input and output transitions, in 
order to simplify notations in the following proof, we use the causal relation R as defined 
earlier. Recall that URtj & 3p G P : (t,-,p), {p,t,) G F. 

Proof. For every t,t' ^ t e , if {*,*'} £ H tnen tnere exists a simple cycle containing both 
of them. Then it is easy to see that {t, t'} G li' because contracting t e cannot remove any 
simple cycle from the net. Thus we only need to show that under the condition stated, 
co' C co. 

First, note that C p = -t e and C' v = t e - are p-cuts, and every t G -C p is ordered with at 
least one t' G C' p ; i.e., {*,*'} € li. Hence, if {t;,*,} G co then 3? G C' p - : {U,?} G li and 
3t G C p : {t,tj} G li. In other words, there exist simple cycles Cl x , ft 2 such that <„*' G O x 
and t,tj G ^2! ^i 5 ^2 must intersect at t e (Fig. 6.6a). 

(=») Suppose that ^fl^ = {*«}• Then in S', the removal of t e introduces URt', 
URtj, tRt' and tRtj (Fig. 6.6b). This introduces a new simple cycle Utj ...W... <,-. Hence 
{*,-, tj] £ co'. Note further that this cycle always contains two tokens; under the one-token 
SM restriction, this results in unsafe behaviors. 

(<$=) Suppose that 3u G T : ^ D fi 2 = {<*,«}• Then in S', even though the removal 
of t e still introduces URf, URtj, tRt and tRtj, this only creates the non-simple cycle 
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(a) 

Figure 6.6: Proof of Lemma 6.6 (a) A marked graph E before contraction and (b) its 
contracted graph E'. 

titj ...u...tt'...u...ti. Hence no new simple cycle is created and {*;, tj} G co'. | 

The following result comes immediately from the proof of the last lemmata. 

Corollary 6.7 Let E be a live-safe marked graph (or state machine) satisfying the one- 
token SM restriction, E' be its T -contracted net, V = T — {t e }. If T- contraction on E is 
tr-preserving then E' is also a live-safe marked graph (state machine). 

Using lemmata 6.5 and 6.6, we can derive the following conditions for tr-preservation 
for LSFC nets. 

Theorem 6.8 Let E be a LSFC net satisfying the one-token SM restriction, E' be its V- 
contracted net, T' = T — {t e }. Then T'- contraction on E is tr-preserving iff the following 
two conditions are true: 

(a) V Pi G -U : |p.- ■ | = 1 or V Pj G t e - : | ■ Pj \ = 1. 

(6) VU G -(-te) Vtj G (t e -)- : there exist simple cycles fij = Upit e . . . i, and Q 2 = tj ■ ■ • Upjtj 
such that \Q X D ft 2 | > 1- 



Proof, (a) The proof for this part is similar to that of Lemma 6.5 for state machine, except 
that for LSFC net, |* e • | > 1 and | • t e \ > 1. According to Lemma 6.5, T'-contraction is not 
tr-preserving iff 

3 Pi G -t e , 3 Pj G t e - : \ Pi ■ | > 1 A | • Pj \ > 1. 
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Hence in order for cf' C cf , the negation of the above statement must be true; in the case 
of LSFC nets, this yields (a). 

(b) The proof for this part is similar to that of Lemma 6.6 for marked graph. However, 
for LSFC net if {ti,tj} & li, besides the possibility that {U,tj} 6 co, one also has to 
consider the case of {£,, tj} € cf. However, in this latter case if condition (a) is satisfied 
then {U, tj} € cf. Furthermore, if {<„ tj} € cf then there exist two simple cycles fti and 
ft 2 which intersect at p,-, t e and pj; hence |fti flfial > 1 and this is consistent with condition 
(b). I 

The contraction being tr-preserving implies that local change due to the removal of t e 
does not affect the global structure of the net: no new simple cyle can result in E' due 
to contraction, and hence if a simple cycle in Nz contains a token, then it still contains a 
token in JVjv. This implies that the contracted net is also live-safe. 

The main result of this section is that if E is a LSFC net and E' is its contracted net 
such that the contraction is tr-preserving then E' is also live-safe. To prove this we first 
show the following lemma. In the sequel, we will denote the set of firing sequences of a net 
E, by FSi, that of a contracted net E$ by FS'j. 

Lemma 6.9 Let E be a LSFC net satisfying the one-token SM restriction, and E' = E/T", 
where T' = T — {<„} and T'- contraction is tr •■preserving. Then for every SM-component 
Ei o/E, there exists a SM-component EJ o/E' such that Ei = Ei/T' and FS[ = FSi\T, 
and vice versa. 

Proof. Note that a SM-component comprises of a set of simple cycles which intersect each 
other at places. 

We need to show that (1) for every SM-component Ei of E, there exists a SM-component 
EJ of Ei such that EJ = E^T' and furthermore, FS[ = FS t \T, and that (2) the contracted 
net E' can have no more SM-components than E. If these two facts are true then the lemma 
is proven. 

Consider any SM-component Ei which contains t e , then in E x there exists a simple 
cycle Q, containing t e . In ft, let p,,pj be the input and output place of t e , respectively. 
Since Ei is an SM-component, all transitions connected to p,- and pj also belong to Ei. 
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Now, eliminate t e from E. 

1. When t e is eliminated from the SM-component Si, every simple cycle containing 
t e gets contracted to a new one with t e removed and places pt,Pj collapsed into a new 
place p' — {pi,Pj}. All transitions previously connected to p,- and pj, except t e , are now 
connected to p' instead. Hence in the contracted net, every cycle in Ei containing t e 
becomes a contracted cycle with t e removed, and other cycles in Ei which intersect at p,- 
and pj will now intersect at p' instead. Thus in the contracted net there is a SM-component 
Ej which contains all transitions of Ei except t e . By the definition of net contraction, we 
have Ei = Ei/T'. 

Since the contraction is tr-preserving, condition (b) of Lemma 6.8 guarantees that 
contraction does not create any "new" simple cycle in the contracted net E' (new in the 
sense that it combines previous simple cycles containing concurrent transitions into a new 
cycle in which these transitions become ordered) and further, any cycle in E containing 
a token will contracts into a cycle containing a token also. Since the contracted SM- 
component EJ is composed of some of these contracted simple cycles, it is live-safe. Also 
since condition (a) of Lemma 6.8 is satisfied, FS{ = FS\ \T'. 

2. Again, condition (b) of Lemma 6.8 guarantees that no "new" cycle is created in the 
contracted net E'. If such a new cycle were created then a new SM-component must exist 
in E', because every cycle is contained in some SM-component. Since no such new cycle is 
created by contraction, no new SM-component can result. This implies that the number 
of SM-components in the contracted net E' can be no more than that in the original net 
E. | 

The above result leads to the following theorem. 



Theorem 6.10 Let E be a LSFC net satisfying the one-token SM restriction, and E' 
E/T' its contracted net,where T'- contraction is tr-preserving. Then E' is also live-safe. 



Proof. Since the contraction is tr-preserving, according to Lemma 6.9, every SM-component 
of E' contains one token each and together they cover E'. Hence according to Hack's the- 
orem, E' is live-safe. I 
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6.3 Decomposition by net contraction 

The significance of tr-preserving contractions is that it provides two alternatives for de- 
composing (by contraction) FA corresponding to reachability graphs of LSFC nets. On 
one hand, we could perform a desired contraction directly on a FA; on the other hand, we 
could contract a net and then generate a FA from the contracted net. It turns out the 
latter approach is almost always more efficient computationally. In case of nets being state 
machines, contraction on such nets and their FA amounts to the same operation. The 
reason it is more efficient than contracting a FA directly is that in a net, each transition 
is allowed to appear exactly once, whereas in a FA, each transition may appear several 
times. Hence removal of transitions from a net is much easier than removal of transitions 
from a FA. 

Theorem 6.11 Let £ be a LSFC net satisfying the one-token SM restriction, E' be its 
T' -contracted net, T' = T — {t e }. If T' -contraction on E is tr-preserving then 

F5(E') = F5(E)rr or equivalent^ *(S') = $(£)/T'. 

Proof. Nz and N& are identical except for transition t e , places in -t e iJt e - and arcs connected 
to these elements (see Fig. 6.7). Let i, denote a transition in -(-te) and tj one in (t e ")"- 
Then if a = o\tit e tjVi is a firing sequence in FS(£), both sequences a\U and tjGi must 
belong to F5(E) and F5(E') because these sequences do not involve t e . 

Hence, in order to show that F5(£') = FS(Ht)\T', we only need to establish the 
correspondence between every minimal length sequence Ut e tj in £ with another i,*,- in £'. 
Only minimal length sequences need be considered because any transition concurrent with 
ti can be fired before it, any transition concurrent with tj can be fired after it. Also, we 
need not be concerned with transitions t (^ t e ) which are output transitions of places in 
•t e or input transitions of places in t e - (Fig. 6.7c); it can be easily verified that the removal 
of t e does not affect firing sequences containing trf or ttj. 

Hence our task is to demonstrate the correspondence between Ut e tj in £ and <,■<,• in £'. 
In £, some input places of tj comes from t e , some from other transitions; let this latter set 
of input places be Pi(= -tj — t e -). Due to the FC hypothesis, there are no arcs between 
any places in P a and t e (Fig. 6.7a). In £', since places in Pi are not connected to t e by any 
arcs, they remain the same; hence input places of tj come from Pi and -/ e x t e - (Fig. 6.7b). 
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(a) FS(E)["T' C FS(E') : We show that for every firing sequence M,[t,)M e [* e )Mj [tj) 
in E, there exists M/[< t )Mj[t,) in E'. 

In E, Mi[ti)M e [t e )Mj[tj) is given: At marking M,- all input places of *,- are marked. 
Since the firing of <,• leads to M e [t e ), at M e every place in -t e — f,-- must have been marked 
by the concurrent firing of transitions in •(•<«. — <,■•). The firing of t e leads to Mj[tj)', at M,- 
all places in -tj are marked. Since the firing of t e marks only t e -, at M e all places in Pi 
must have already been marked by the time £,- fires; some of it may have been marked by 
the firing of some transition concurrent with i;, or even by < t - itself. 

In E', let us construct M([ti)M'j[tj): Let Mi\Mj be markings such that M[[ti)M'j. We 
know that M[ exists because it is the same as M t - except for places in -t e x t e -. Recall 
that Restriction 6.2 on net contraction states that none of the places in -t c x t e - can be 
an input place to t,-. Therefore, if U is enabled in M,-, it is also enabled in M-. The firing 
of U at M- marks -t e x t e - and possibly some of the previously unmarked places of Pi (as 
explained above), so that all places of Pi are marked. Therefore all input places of tj are 
marked, leading to Mj; at this marking, tj is enabled: Mj[tj). We have thus constructed 
MHU)M'j[tj). 

(b) PS(E') C FS(E)\T : We show that for every firing sequence M^M'ftj) in E' 
(where i, 6 -p', tj € p'- for some p' E -t e x t e -), one can construct Mi[ti)M e [t e )Mj[tj) in E. 

In E', since M'j[tj), at Mj all places in -tj are marked. We can break -tj into Pi and 
P2 = tj — Pi, the latter being a subset of -t e x t e -. Then for every p' € P2, Mj(p') = 1. 
Since only P 2 is marked by the firing of <,, Pi must have already been marked when *, fires. 

Now in E, let us construct Mi[ti)M e [t e )Mj[tj): Since p' = {puPj) for some p,- G -t e , pj G 
< e -, in E there exists a marking Mj under which pj is marked. Since pj is an output place 
of t e , Mj must result from the firing of t e . This implies the existence of another marking 
M e which enable t e . Thus at M e all places of -t e are marked, including p;. Therefore we 
must have a marking M;[*t) at which all places in -t t except pi are marked; since -t e is a 
p-cut, -t e — {p,} can be marked before p,- by those transitions concurrent with t{. Thus we 
have constructed Mi[ti)M e [t e )Mj[tj). | 

The preceding results suggest the following method of abstraction for LSFC nets. Sup- 
pose we are interested in the behavior of a subset of transitions U C T of LSFC net E. 
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Figure 6.7: Proof of Theorem 6.11 (a) The part of a free-choice net where contraction will 
occur and (b) its contracted net. (c) Cases which need not be considered. 

Then we choose the smallest subset T" such that U C T' C T and T'-contraction on £ is 
tr-preserving. Then the T'-contracted FA of E, $(£)/T', is guaranteed to be identical to 
the FA of the contracted net E' = E/T'. 

Below, we develop one major result for this chapter concerning the behavioral equiv- 
alence of a LSFC net E and a set of contracted nets of E. We will adopt the following 
notational convention: (i) for a net E, its set of firing sequences is denoted by FS, its 
causal relation by R; similarly, (ii) for a SM-component £,-, they are FSi and #<; finally, 
(iii) for a contracted net T,'-, they are FS': and R'-. 

Theorem 6.12 Let E = {P,T,F,M Q ) be a LSFC net satisfying the one-token SM restric- 
tion, and {Ei, ££, . . . , E^} be a set of contracted nets o/E, where ££ = E/ZJ, Tj C T, for 
1 < 3 < m. 

For 1 < j < m, if (i) Tj- contraction is tr-preserving and (ii) the union of causal 
relations Rj covers R, i.e. [jjR'j 2 R, then 

FS = FS' 1 \\FS' 2 \\...\\FS' m . 

The example in Fig. 6.8 illustrates this theorem. The top leftmost net is a LSFC net E 
which is a marked graph. Also for convenience, we use the graphical abbreviation for STGs 
to show this net. The rest of the top row contains three SM-components {Ei, E 2 , E 3 }, while 
the rest of the left column contains two contracted nets of E: {EJ, Ej}. In the contracted 
nets, solid arcs corresponding to part of the causal relation which are present in the original 
net E; the union of these solid arcs "cover" all arcs in E. The dashed arcs in the contracted 
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nets represent members of the causal relation which have no correspondence in E. Also, 
both contractions are tr-preserving. 

The above theorem states that the set of firing sequences of E is the identical to one 
obtained by weaving sets of firing sequences of the contracted nets {E^, Ej}. 

The significance of this theorem is that it allows net to be decomposed into smaller 
nets in any arbitrary way, and each can be used for the purpose of synthesis or analysis. If 
the conditions stated in the theorem are met, then the behavior of the original net can be 
obtained by concurrently composing (weaving) the behavior of the smaller nets. Since we 
have shown that for LSFC nets, every set of firing sequences FS has an equivalent finite 
automaton $, the above theorem implies that 

• = s *;il*il|...||» , m . 

Proof of Theorem 6.12. Let {E x , E 2 , ■ . . , E„}' be the set of all SM-components of E. Ac- 
cording to Theorem 3.8, the weave of sets of firing sequences of the SM-components gives 
the set of firing sequences of the net, i.e., 

FS = FS 1 \\FS 2 \\...\\FS n . 

Hence, every contracted net E^- (1 < j < m) can be decomposed into n not necessarily 
distinct SM-components {E^,}, 1 < i < n such that 

FS'j = FS' jtl || FS' j>2 || ... || FS' jin , 

where FS'j ti denotes the set of firing sequences of E^. (This is illustrated in Fig. 6.8, 
where a contracted net in each row of the first column is decomposed into SM-components 
shown in other columns to its right. Note that even though some of the SM-components 
are the same, we list them separately to show that they are contracted version of the 
SM-components on the first row, according to Lemma 6.9.) 

As indicated above, according to Lemma 6.9, for every SM-component E^,- of the con- 
tracted net Ej, there exists a SM-component E,- of E such that E^, = Ej/Tj. It is easy 
to see that if the union of arcs in {E^} cover E (Uj Rj 2 R), then arcs in {E^J cover the 
SM-component E,: Uj Rj,i 2 R%- In order to proceed with the rest of the proof, we need 
the following 
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Figure 6.8: An example to illustrate the proof of Theorem 6.12. The first row contains a 
LSFC net E on the leftmost column, and three SM-components Ei, £2, E3. Below the first 
column are two contracted nets EJ, £ 2 . 
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Proposition 6.13 For every SM- component E,- as defined in the previous paragraph: 
FSi — FS' lti || FS 2i ||...|| FS' mi , where FS' jti denotes the set of firing sequences of the 
contracted SM- component S^, = E.-/T-, as defined in the previous paragraph. 

By replacing the right-hand side of the above equation for each FSi in the equation 
for FS, and using the fact that weaving is associative and commutative, we obtain the 
following expression for FS: (the terms in this expression have been rearranged such that 
each column i contains sets of firing sequences of the contracted nets of the SM-component 
E.0- 
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Notice that according to Proposition 6.13, each row j yields the set of firing sequences of 



the contracted net E'-. Hence 



FS = FS' 1 \\...\\FS' j \\...\\FS' m . 



Proof of Proposition 6. IS. The proof is carried out for the case with two contracted nets: 
let E be a LS state machine and EJ = T,/T[, E 2 = E/r 2 ' be its contracted nets such that 
the contractions are tr-preserving and R[ U R f 2 2 R (an example is given in Fig. 6.9). 
Let the sets of firing sequence of S, EJ and E£ be FS, FS[ and FS£, respectively. For 
convenience, let FS = { a { }, FS[ = { 7i } and FS' 2 = { fi t }. Since the contractions 
are tr-preserving, according to Theorem 6.11, we have FS[ = FS/T{ and FS' 2 = FS/T[, 
implying that for every sequence <r t £ FS, there exist one sequence 7, € FS[ and another 
Pi € FS 2 such that 7,- = (n\T{, fa = <r t [T 2 '. (For example, in Fig. 6.9, for <7i = abcf, there 
exist 7! = abcf and fa = acf; for a 2 = adef, there exist 72 = adf and & = adef). 

Since these nets are SMs, if sequence t x t 2 ...t n £FS then (ti, t i+1 ) e R for 1 < i < n, 
and vice versa. Therefore if the causal relations R[, R^ cover R, then the above sequences 
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Figure 6.9: An example illustrating the weave of two contracted nets of a live-safe state 
machine. 



7,- and ft "cover" 7,-, that is 7,-||ft = a,-. 1 

Take any two firing sequences which do not correspond to part of the same simple 
cycle in S. Since £ is a state machine, they represent choices in S. Then these two 
sequences correspond to part of two distinct cycles fi t - and Oj which intersect, as indicated 
in Fig. 6.10. Let <r, and a, denote their firing sequences, respectively. Let X = (<7;|<7j), 
this is a set which can be constructed for any two sequences representing choices in E. 

Since the contractions are tr-preserving, in EJ and E 2 respectively, one can construct 
X\ = (7«'l7?) and X2 = (&|#*)> where 7,-, ft are defined in the first paragraph of the proof 
(see Fig 6.10). If we can show that X = X x \\X 2i then it follows that FS = FS[ || FS^. 

X l \\X 2 = { a € T* I a\T[ g { 7 ,-, 7i } A a\T 2 e {ft,ft} } 

= { (7 € T* I (<r \T[ = 7i V a pj = 7; ) A (<r f 2* = ft V a \T 2 = ft ) } 
= { a € T* I {cr\T[ = 7i A a\T 2 = ft) V {a\T[ = 7i A <7p* = ft) 

V(<rpY = 7,- A <T\n = ft) V (<r\Ti = 7; A a\T^ = ft) } 
= {*€T* I ((7^ = 7,^.7^ = ft) V ( < rrr i ' = 7iAarT 2 ' = ft)}U 
{ a G T* I (a fi; = 7 i A a\T 9 = ft) V {a\T[ = 7j A a[T 2 ' = ft) } 



*It is more correct to write {Ti}||{A} = {^1} instead; however the above simplified notations are used for 
the sake of clarity. 
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Figure 6.10: Proof of Proposition 6.13. 

In the last line above, we need to show that 

{ a 6 T* | (a\T{ = 7f - A a[T 2 ' = ft) V (4?? = 7i A a\T t = ft) } = {}. 

Let Y = { a € T* | (apT? = 7 iAa[T 2 ' = ft) } and Z = { a <= T* | (<r[T/ = yjAaffi = ft) }. 
Below we show that Y = {}; exactly the same technique can be used to show that Z = {}. 

First, note that since fti and ft 2 are two distinct intersecting cycles, there must exist 
some t which belongs to both cycles, some <i which belongs solely to fti and and some t 2 
which belongs solely to ft 2 , as indicated in Fig. 6.10. Furthermore, the conditions that (i) 
contractions are tr-preserving and (ii) R[ U R^ covers R together imply that there exist 
such Mi,tf 2 w *" c h belong to both E£ and E 2 (see Fig. 6.10): Condition (i) indicates that 
the structure of the net is preserved. Recall from Lemma 6.5 that it is illegal to remove 
all transitions on either branch of the contracted nets, therefore there must be some <i,t 2 
which remain in the left and right branches of the contracted nets. Condition (ii) implies 
that there must exist such <i, t 2 which belong to both contracted nets: if no such t\, t 2 exist, 
R[ U .Rj does not cover R. Therefore, we have (i) {t,*i,< 2 } C T{ D T 2 and (ii) sequences 
7,- = ...*...*!..., ft = ...t...t 2 ... 

From the definition of Y : a G Y => tr\T[ = 7f A <7pT 2 ' = ft. From (i) and (ii), it 
follows that 

<r\{t, ti,t 2 } = ...«! . .. and a\{t,t 1 ,t 2 } = . . .tt 2 

Clearly both equalities cannot hold simultaneously and hence, no such sequence a can 
exist, thus implying that Y = {}. I 
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6.4 Application to Signal Transition Graphs 

Given a STG, one can derive from it a state graph by following the procedure outlined 
in a previous chapter. In order for the implementation obtained from the state graph to 
be deadlock-free and hazard-free, the STG specification is required to satisfy liveness and 
persistency. As discussed earlier, from the state graph, one can proceed to implementation 
by determining the network function which consists of a set of logic functions, one for each 
signal. The logic function of a signal can be obtained by determining, for every state in 
the state graph, the implied value of that signal; the logic function is precisely the set of 
all implied values of a signal. 

There is a better alternative to the approach outlined above, being that of decompo- 
sition. In contrast to other decomposition methods such as those applied to the FSM 
model, a very simple alternative exists for state graphs derived from STGs. This alternate 
decomposition technique uses the causal relation in the STG to decompose its state graph, 
as described below. 

Let Sj be a STG and $j its state graph, both defined on a set of signals J which 
can be partitioned into J = Jj U J N U Jq — the sets of input, internal and output signals, 
respectively. For every signal i € J, the input set of t, denoted by I(i), is defined as 

I(i) = {jeJ\j.Ri*} 

= {j€J\j+Ri+ V j+Ri- V j-Ri+ V j-Ri-} 

where R is the causal relation in Ej (In Chapter 5, we have provided the justification for 
relating this subset j m Ri m of the causal relation to the set of input of i). Thus I(i) is the 
set of signals whose transitions cause transitions of signal i. 

Since in Sj, I(i) constitutes the set of signals whose transitions cause those of i, the 
logic element i can be implemented as a logic function with one output variable i and 
input variables in I(i). Since input signals are given, we need be concerned only with the 
implementation of non-input signals, i.e. those in Jni = Jn U Jo- Thus a straightforward 
decomposition algorithm for state graphs consist of the following steps. 

Algorithm 6.14 (Decomposition of state graphs) Let Ej be a STG and $j be its 
state graphs. For every non-input signal i € Jni, let J'(i) = {i} U I(i) and T"(t) = 
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J'(i) x {+, — }. The set of decomposed state graphs of $j is given by 

{ *'(i) 1 1 € Jm }, 
where $'(0 = $j/T'(i), the T'(i)- contracted state graph o/$j. 

It is easy to see that if that if the STG has a consistent state assignment, then so do the 
contracted state graphs obtained from the above algorithm. This is due to the fact that in 
a state graph, if a transition t is removed, then so is t as they are transitions of the same 
signal. Thus in every cycle in a state graph, every remaining pair of transitions x,x still 
alternate. Thus, 

Lemma 6.15 Let $j be a state graph and { $'(i) } its set of contracted state graphs, as 
defined above. Then if $j has a consistent state assignment, every $'(0 nas a consistent 
state assignment. 

Based on the results developed in the previous section, there is a better way to de- 
termine the contracted state graphs. This is carried out by not performing contraction 
directly on the state graph $j, but by first obtaining contracted nets from the STG Hj. 
These will produce the same contracted state graphs if contractions on nets preserve the 
temporal relation. Hence, the following decomposition algorithm based on net contraction 
is more efficient. 

Algorithm 6.16 (Decomposition by net contraction) Let Ej = (P, T, F, M ) and 

$j = {S, T, 6, so) be a STG and its state graph. For every non-inp\ut signal i £ Jm, 
let 

J'(i) = {i} u I(i) and T'(i) = J'(i) x {+, -}. 

Then the set of contracted state graphs { $'(»') | i € Jm } can be obtained as follows. For 
i € Jni, 

(a) Determine S'(i) = Yij/T'(i) and its state graph $(S'(i)). 

(6) If T'(i)- contraction is tr-preserving then $'(0 * 3 identically $(S'(^)). Otherwise, add 
appropriate signals from j € J — J'(i) to J'(i) such that the resulting contraction 
becomes tr-preserving. Then perform step (a) again. 
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An important note. In a contracted net £'(i) (defined over the subset of signals J'(i) = 
{i} U J(t)) we consider i as the on/y output signal, all signals in I(i) are input. Hence in 
E'(t), I(i) x {+, — } constitutes the set of transitions of input signals, while {z+,t_} the set 
of transitions of output signals. This fact has important implication concerning persistency 
of contracted nets: in a contracted net for signal i, we only need to verify the persistency 
of transitions of i but not those of I(i) as the latter are assumed to be persistent. Their 
persistency must be guaranteed by other contracted nets which represent other part of the 
control circuit. An example illustrating this point can be found in Chapter 7. 



Chapter 7 

A Design Example 



As mentioned in Chapter 1, we advocate the use of STGs as a tool for specification and di- 
rect realization of distributed control modules which form the control structure of a system 
organized around the distributed control principle. We have been able to provide some real 
proofs of our approach by using STGs in the design of complete concurrent VLSI systems. 
These include a self-timed packet router with a maximum measured throughput rate of 22 
Mbytes/sec [10] and a self-timed FIFO queue with a novel distributed organization and a 
measured throughput rate of 4 Mbytes/ sec [9]. 

In this chapter, we stress another application area of asynchronous self-timed logic 
which is more conventional than the distributed organization proposed above. As an 
example, we examine the design of a self-timed controller for an A-to-D converter. First, 
this example serves to demonstrate that STGs can be useful for designing asynchronous 
logic in general, and secondly it is sufficiently complex to highlight most of the important 
and interesting features of our synthesis approach This design was first published in [8]. 

Asynchronous control logic has found applications mostly in areas where the system 
inputs are inherently asynchronous. Some examples are vision VLSI systems [48] and 
interface circuits to asynchronous peripheral devices such as a disk drive. In these systems, 
asynchronous control circuits provide a modular interface which greatly facilitates system 
integration. In other cases, asynchronous circuits are almost indispensable and provides 
the highest operation rate possible; these include timing chains in dynamic and static 
memory devices [54] and even those used in synchronous microprocessors to generate extra 
cycles [22]. Given its usefulness, asynchronous logic has not been popular because of the 
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difficulties in its design and maintenance. In Chapter 1, several well-known problems with 
the Finite State Machine model and its implementation of asynchronous circuits have been 
summarized. 

This chapter is organized as follows. In Section 1, we briefly compare different design 
alternatives for A/D converters and discuss the advantage of one with self-timed operation. 
The behavior of the self-timed controller for the A/D converter is then presented and the 
construction of a STG specification is described. In Section 2, the synthesis procedure and 
implementation of the controller are discussed in detail. Finally, Section 3 provides a few 
remarks on the use of STGs for direct synthesis of control circuits. 



7.1 Specification of the Controller 

A/D converters are subject to synchronizer failure because they make use of amplifiers 
as comparators; these are either high-gain or regenerative bistable amplifiers. When the 
input voltage v in is close to the reference voltage v ref (Fig. 7.1), the response time of 
the comparator becomes unbounded and its output may take an unbounded amount of 
time to settle at a valid voltage level (0 or 1). This type of failure has been observed in 
commercial A/D converters [50]. The synchronizer problem has been studied extensively, 
and it is well-known that if the circuit is required to produce a valid output within a 
certain time then there is a finite probability V that the output will be invalid at that 
time [13]. V decreases exponentially as the time allowed for the synchronizer to resolve 
is increased. For an JV-bit converter using regenerative comparators, the analysis in [21] 
gives the following lower bounds on the worst-case conversion time Twc in terms of the 
fault probability V. For flash converters, T wc > N In 2 - lnP, where T wc is normalized to 
some time constant of the comparator. For clocked successive approximation converters, 
Twc > JV(JVln2 - ]nV), simply because they take N steps to perform one conversion. 
For self-timed successive approximation converters, not all conversion steps are marginally 
close to the reference voltage, hence some conversions will be fast and some slow. As shown 
in [21], the self-timed successive approximation converter becomes significantly faster than 
clocked successive-approximation converters for very low V and large N. 
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Figure 7.1: Block diagram of the successive-approximation A/D converter. 



7.1.1 Behavior Specification 



The block diagram of the successive approximation A/D converter is shown in Figure 7.1. 
The comparator senses the difference between the input voltage v in and the reference 
voltage v ref and produces a 1-bit result. The comparator has a control input Z r which 
balances it at the beginning of each conversion when Z r makes a 0-to-l transition, and 
initiates a comparison when Z r makes a l-to-0 transition. It also has a mutual- exclusion 
(m.e.) circuit [32] whose output is active (=1) only when the comparator output is valid. 
This circuit is required because the comparison time is a function of the difference between 
the input voltage and the reference voltage; the smaller the difference, the longer the time 
it takes for the comparator to decide. This is the familiar phenomenon due to metastability 
[13]. 

The latch and the combinational logic form a finite state machine performing the suc- 
cessive approximation algorithm. Note that this machine operates in pulse mode, a mode 
of operation different from that of the self-timed controller we are synthesizing. Due to 
the fact that this machine performs many data-dependent operations, it is more economi- 
cal and straight-forward to implement it in pulse mode instead of as a standard Huffman 
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asynchronous state machine. Data are latched on the rising transition of signal L r and 
held in the latch after L r goes low. Signal L a goes high as soon as data are latched, and 
goes low shortly after L r goes low. The reset input of the latch is controlled by signal RHq, 
so that when Req is low, outputs of the latch are reset to the appropriate initial values. 
Signal LB is the Last-Bit signal which goes high when the converter has determined the 
last bit of the digital word. The D/A converter at the right of the diagram accepts the 
digital word produced by the state machine and generates the analog voltage u re /. The 
combined delay of the combinational logic and the D/A converter is matched by some 
delay circuit from D r to D a . While it is possible to accomplish this timing constraint in 
a speed-independent manner using dual rail coding [32], a simple delay circuit is more 
justifiable from an engineering standpoint. 

Initially, the state of the system is 

Req = Ack = Z r = Z a = L r = L a = 0,D r = D a = l. 

Since Req = 0, the latch is initialized with LB = 0. Thus, the and-gate whose input is Req 
is enabled and the and-gate whose output is Ack is disabled. When Req is raised, Z r will 
go high and initiate a cycle of the successive-approximation algorithm. After each cycle, 
D a will restart another cycle by causing Z r to go high again. This is repeated until LB 
becomes high during the last cycle. This will cause Ack to be raised instead of Z r when 
D a goes high. After that, Req drops in response to Ack, resetting LB and in turns Ack to 
low. At this point the circuit returns to its initial configuration for the next conversion. 

7.1.2 STG specifications 

A Signal Transition Graph describing the operation of the self-timed controller is shown 
in Fig. 7.2. Since the circuit operation is totally deterministic, i.e. there is no data- 
dependent operation, no places are drawn explicitly. The arcs represent the causal relation 
R discussed earlier. In this chapter, we will use aRb and a —* b interchangeably in order 
to improve readability. Intuitively, aRb (a causes 6) can be understood as as a timing or 
sequencing constraint between occurrences of two signal transitions. 

The two bold arcs in Fig. 7.2 are not part of the sequencing requirement of the circuit 
and they can be ignored for the moment; they are persistency constraints added to the 
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Figure 7.2: A STG specification of the self-timed controller. 

STG to ensure persistency, as discussed in Chapters 2 and 5. There are two subtle timing 
constraints required for the correct coordination of data and control signals: The constraint 
L T - —* Z r+ guarantees that the gating signal of the latch is turned off before the comparator 
changes its output value, so that there is no possibility of latching the comparator output 
while it is changing. The constraint D a+ — ► Z r+ ensures that a comparison is initiated 
only after a new value of v re j is available (as signified by D a going high). 1 

Finally, transitions £> r _, D a _, L r _ and £ a _ in Fig. 7.2 are simply reset transitions of 
the reset signaling handshake protocol [32]. For the control circuit which we specify, event 
occurrences are signaled over control links, using the reset signaling protocol. Usually, an 
occurrence of an event is signaled by a positive transition on the ready wire of the control 
link; its acknowledgment is signaled by a positive transition on the acknowledge wire of 
the control link. The signals on these links are then reset through negative transitions 
before the occurrence of the next event can be signaled. In this communication discipline, 
a transition on the acknowledge wire can only occur in response to a transition on the 
ready wire and vice versa. As discussed in Chapter 4, for an input link { I T , !„} where I r is 
an input ready and I a an output acknowledge, this communication interface to the external 



*A specification with more concurrency can be obtained by requiring only D a + — » Z r _, thus allowing the 
comparator to be balanced while a new v rt j is evaluated. However, we will use this specification with less 
concurrency to illustrate the design procedure. 
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world is specified in a STG by the pair of constraints {/„_ — ► I r+ ,I a + — > J r _}. Similarly 
for an output link {0 r , a } where O r is an output ready and a an input acknowledge, its 
corresponding set of constraints is {0 r + -* a +, r - -* a _}. These interface constraints 
are an example of our design rules described in Section 4.3 which states that in a STG, 
every transition of an input signal has exactly one transition which directly precedes it, 
and this transition must be that of an output signal. Transitions of input signals to the 
circuit are underlined to distinguish them from those of non-input signals. This reflects 
the fact that transitions of input signals are generated externally, whereas non-input ones 
are generated internally by the circuit. 

7.2 Synthesis from STG Specification 

The STG specification of the controller in Fig. 7.2 is a concise description of its operation 
based on the causal relation between signal transitions in the circuit. In order to obtain 
a logic implementation of the circuit from this specification, it must be ensured that the 
STG specification satisfies liveness and persistency. Liveness of the STG implies that its 
state graph is strongly connected and has a consistent state assignment, hence the circuit 
realization is free from deadlock. Persistency implies that the circuit realization is hazard- 
free. To summarize, the synthesis procedure from a STG specification consists of the 
following steps: 

(a) Meeting liveness and persistency. Checking for the state assignment problem and 
introducing internal signals if required. 

(b) Decomposing the STG into contracted nets and obtaining their state graphs. 

(c) Determining the logic equation for every non-input signal from its state graph. 

7.2.1 Meeting liveness and persistency 

It is easy to verify that the STG specification of the control circuit (Fig. 7.2) satisfies the 
liveness conditions: it is strongly connected and for every transition t, there exists a simple 
cycle containing both t and i. The second condition also indicates that the state graph 
has a consistent state assignment. 
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One can view the construction of a STG from a control circuit's behavior as a specifi- 
cation of the presence or absence of sequencing constraints between control events. Such a 
preh'minary specification will usually contain non-persistent transitions due to interactions 
between concurrent signal transitions, as discussed in Chapter 5. The addition of per- 
sistency constraints essentially serve to limit the allowed transition sequences to a subset 
of the original set such that none can produce non-persistent behavior. Sometimes the 
original specification may need to be altered slightly for persistency to be satisfied. 

Without the bold arcs, in the above STG, transitions D T + and Z T+ are non-persistent 
since the following conditions are true (Theorem 5.5): 

(a) L a+ -+ D r+ and {L a -,D r +} € co, 

(b) D a+ -* Z T+ and {D a _, Z r+ ) G co. 

To eliminate non-persistency in case (a), we have to add the persistency constraint D r + — > v 
L a — This condition can be satisfied by introducing the bold arc D r+ — ► L r _. In this case, 
we cannot use the arc D r+ — ► L a _ because L a is an input signal to the control circuit, and 
as mentioned earlier, its transition is allowed to have exactly one predecessor. 

In case (b), arc Z r+ —* .D r _ could be used to satisfy the persistency constraint Z r+ — > p 
D a _ which will ensure the persistency of Z r +. However, this arc would necessitate the 
addition of another arc D r - —*■ Z T - to guarantee the persistency of D r _. Instead of 
using this pair of arcs, we chose the bold arc Z r _ — ► D r - which also satisfies the above 
persistency constraint. This example shows that there is more than one choice for satisfying 
the persistency constraints; hence, may help the designer make the best choice. 

With the addition of these new arcs, some of the sequencing constraints become re- 
dundant. For instance, the constraint L B+ — » X r _ is already satisfied by the existing pair 
L a+ — * D r+ and D r+ — ► L r _. One can thus modify the specification by removing these 
redundant constraints. Two redundant constraints L a + —* L r - and D a+ — ► D r _ can be 
removed from Fig. 7.2 to produce the STG of Fig. 7.3a. 

At this point, we have modified the original specification to produce a STG which 
satisfies liveness and persistency as part of the sequencing requirement. We also need to 
check for the possibility of non-persistency due to state assignments. In Fig. 7.3a, one 
can immediately detect an R-path (Z r +, Z a+ , Z r -, Z„_) which results in a state-assignment 
which exhibits non-persistency. Intuitively, in the absence of any other intervening tran- 
sition, consecutive rising and falling transitions of Z a and Z r take the circuit back to the 
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same state. More specifically, there are two p-cuts 

C p = {(D a+ , Z r+ ), {L r _, Z r+ ), (L r _, L a _)}, 
C' p = {(Z a _,L r+ ),(Z r _ y D r _),{L r _,L a -)} 

as indicated by the dashed arcs in Fig. 7.3a such that [C p , C p ] forms a complementary set. 
Since Z r+ satisfies the conditions of Lemma 5.8: 

Z r+ e(C p - + C' p -) : (-Z r+ ) C C p A Z r+ # Tj, 

Z r+ is non-persistent. This is illustrated in Fig. 7.3b, the binary representations of both 
M and M' are 000111, where M and M' are markings corresponding to p-cuts C p and C", 
respectively. Starting from M, the firing sequence Z r+ Z a +Z r _Z a . leads to marking M' 
at which, in addition to L a . being enabled, Z r+ is also enabled. This gives rise to non- 
persistency of Z r+ . On the other hand, note that even though L a . satisfies the conditions 
of Lemma 5.7, it can be assumed to be persistent because it is a transition of an input 
signal. 

As mentioned earlier, in order to eliminate non-persistency due to state assignment, one 
can introduce an additional internal signal to permit the distinction between the binary 
representations of markings M and M> . Thus, one could introduce a signal x, and insert 
a transition of x, e.g. x + , into the middle of the R-path (Z r+ ,Z a+ ,Z r _,Z _) to obtain 
(Z r+ , Z a+ , x + , Z r _, Z a _). This in effect removes all complementary sets formed by distinct 
p-cuts from the STG. In order to ensure liveness of the modified STG, one has to determine 
a place to insert x. as well. However, to carry this task out effectively, we need to consider 
the next synthesis step of decomposition. 

As outlined above, we can decompose the STG into a number of contracted nets and 
then determine their state graphs. Clearly, one could take the alternative approach of 
deriving the state graph directly from the STG (with the addition of signal x) and de- 
termining logic equations from it. However, this would involve a total of seven signals, 
and every state will be a binary representation of the set (Z ry Z a , L r , L a , D r , D a , x). With- 
out decomposition, at worst, the logic equation of any non-input signal Z r ,L T ,D T or x 
may depend on all seven variables. Obviously, this is grossly inefficient. The alternative 
approach of decomposition can be carried out in a straightforward manner by using the 
causal relation R to produce an efficient implementation, as discussed below. 



'iipiagiiii^^ 



130 



CHAPTER 7. A DESIGN EXAMPLE 




osstu 
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Figure 7.4: (a) The contracted net of D r derived from the STG in Fig. 6.3a. (b) State 
graph of the contracted net in (a). 

7.2.2 Implementation using decomposition 

We apply the synthesis procedure as outlined earlier to produce a circuit, starting from 
the STG in Fig. 7.3a. It will be demonstrated that when this STG is decomposed into 
reduced graphs, the state graph of one of them is non-persistent due to the lack of state 
information. As suggested earlier, this requires the addition of an internal signal x to the 
STG specification. In the following presentation, the synthesis procedure will consist of 
two passes, with the latter producing the final circuit implementation. 



First Pass. Fig. 7.3a shows that L a ,D a , Z a are input signals to the circuit, while the rest 
are non-input signals whose logic equations are to be determined. The STG in this figure 
has three non-input signals D r ,L r ,Z r , and their input sets are I(D r ) = {L a , Z r ), I(L r ) = 
{D r , D a , Z a } and I(Z r ) = {L r , D a , Z a }. 

The contracted net of D r (denoted by E'(J5 r )) and its state graph are shown in Fig. 7.4; 
each vertex in the state graph is a binary vector representing signals in the set (L a , Z r , D r ). 
From state s 3 = 001, the consecutive occurrences of Z r+ and Z r _ take the circuit to state 
Oil and then back to 001. (A similar case occurs starting from state 101.) Correspondingly, 
in the contracted net oiD T , there is an R-path of consecutive transitions of signal Z r which 
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directly precedes the output transition D r : (Z r+ , Z r _, £> r _). According to this state graph, 
logic element D T is implemented such that whenever it is in state s 5 , it will cause transition 
D r _ to occur. However, the state assignment results in s 3 = s s . Hence, whenever the circuit 
is in either state, both transitions Z r+ and D r _ are enabled. In which case, the transition 
sequence D r+ Ir _D r _ may take place instead of the correct sequence D r+ L _Z r+ Z r _D r _, 
and the circuit malfunctions. Moreover, transition D r _ is non-persistent because while it 
is enabled in state s 3 , the occurrence of Z r + brings the circuit to state s 4 in which D r - is 
no longer enabled. 

The problem in this situation arises from the fact that it is impossible for the circuit 
to distinguish that s 3 and s 5 are supposedly different. In order to modify them into 
distinguishable binary states, we add another signal called x into the circuit. Since this 
problem shows up in the contracted net of D T as a pair of consecutive transitions of the 
same signal Z r , a transition of x, say x + , is inserted between them. This requires that 
x_ also be added to preserve liveness. The contracted net D r indicates that x_ must not 
be inserted (i) between the pair (£> r+ ,Z r+ ) or (Z r _,D r _) because this only produces the 
same problem but with two pairs of consecutive transitions of the same signals, (ii) into 
the R-path (D r+ ,X _,D r _) because this makes x+ and x_ concurrent and thus violates 
both liveness and persistency. Hence x_ must be inserted into the R-path (D P _, L B+ , D r+ ). 
Considering the STG of Fig. 7.3a, this means that x_ must be inserted into the path 
(D r _,D a _,Z, r+ ,£ 0+ ,Z? r+ ). Furthermore, since transitions of input signals D a ,L a and Z a 
can have only one incident arcs coming from transitions of their corresponding request 
signals D r , L r and Z r , x_ cannot be inserted in front of these transitions. Thus x_ can 
be inserted between (I> _, L r+ ) as shown in Fig. 7.5, or between (L 0+ , D r+ ). In this latest 
specification, x + does not directly precede transitions of signal D r ; however it must be 
used as an input to logic element D r to eliminate hazards at signal D r . 

Finally, note that transition x_ can also be inserted between (I 0+ , D r+ ) in the STG in 
Fig. 7.3a. This would result in another STG specification which yields a slightly different 
implementation of the circuit. This fact indicates that the implementation is sensitive to 
the particular form of the STG, which is understandable because the state graphs extracted 
from STGs are unique state-based representations of the behavior of a circuit. 
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Contracted net for Zr Contracted net for Lr Contracted net for Dr Contracted net for x 




Figure 7.5: (a) The final STG with the addition of signal x. (b) Contracted nets for 
non-input signals Z r , L r , D T and x. (c) Structure of the corresponding circuit. 
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Second Pass. The STG in Fig. 7.5a shows that there are four non-input signals D r , L r , Z T 
and x, with input sets 

f I(L r )={D r ,Z a ,x} 
< I(Z r )={L r ,D a ,x} 

I(x) ={Z a ,D a ) 
{ I(D r )={L a ,Z r ,x}. 

The input set I(D r ) contains signal x due to the reason just described. The contracted 
nets of D r , Z r , L T and a; are shown in Fig. 7.5b. At this point, we obtain the structure of 
the circuit using the input/output information of the constituent logic elements, as shown 
in Fig. 7.5c. 

The final step in the synthesis process is to derive logic equations from contracted nets. 
This step is illustrated for signals Z T and x. From the contracted net of Z r (reproduced 
in Fig. 7.6a), one can derive its state graph (Fig. 7.6b) with states representing signals in 
(L r ,D a ,x,Z r ). 

The state graph can be transferred to a type of K-map called transition map; the 
transition map of signal Z r is shown in Fig. 7.6c. Each entry in this map corresponds to a 
state, which is a binary representation of the signals {L r ,D a ,x,Z r }; arcs between entries 
are simply transitions between states as given by the state graph. A K-map for Z T can be 
obtained by replacing each entry (corresponding to a state) in the transition map with its 
implied value for Z r , as discussion in Chapter 4 (Fig. 7.6d). For example, in state 0111, 
the implied value of Z r is 0, thus this entry in the transition map is replaced by a 0. The 
logic equation of Z r can be found from this K-map to be 

Z r — L r D a x. 

Lastly, note that in the contracted net of Z r , there is an R-path (Z, r+ ,I, r _). However, in 
contrast to the previous case, it does not cause non-persistency. Its state graph (Fig. 7.6b 
shows that from state 0000, the firing sequence L r+ L r _ leads back to state 0000. Thus 
both L r + and D a + are enabled in state 0000; however, since they are considered as inputs 
to logic element Z r , they can be assumed to be persistent. The persistency of L r+ and 
Z> 0+ has to be guaranteed by logic elements L r and D a , respectively. 

In a state graph for an output signal i, it is often the case that a certain state s has 
more than one next-state. Hence we need to choose one for its implied value. Suppose 
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Figure 7.6: Steps in the transformation from a contracted net to the logic equation for 
signal Z T . 

that transitions t\ and t 2 are enabled in s, leading to next-states si and s 2 , respectively. 
As described in Chapter 2, there are two cases: 

• If neither f i, t 2 is a transition of signal i (t\, t 2 ^ »•), then si(i) = 3 2 (i). In this case, 
the implied value of s is unique. K-map entry corresponding to s is entered with this 
unique value 3i(i). 

• If either <i or t 2 is a transition of », for instance, t\ = t* and t 2 ^ i», then s\(i) ^ 
s 2 (i) = s(i) 3 . In this case, the next-state value of s is not unique. However, we 
require that the K-map entry corresponding to s be entered with si(t'), the implied 
value which results from the transition of signal i itself. If furthermore, t x is also 
enabled in state s 2 , then *i is persistent and no hazard results. Otherwise, t x is 
non-persistent and the circuit has hazards. Note, however, that this will not happen 
if the STG is persistent. 



In the state graph of x, state 101 has two next-states due to the concurrent transitions 



3 Note that the case with <i = <2 = «* is not possible as either ti or t2 will not be consistent for state s. 



136 



CHAPTER 7. A DESIGN EXAMPLE 




Dai- 



fa) Contracted net of x 




x- 



100 



(b) State graph of x 



Dax 



Za 



00 01 11 10 



0- 

1 



HI 



(c) Transition map of x 



Dax 



Za 



00 01 11 10 





1 



0_0_ 1 
11 



(d) K-map of x 



Figure 7.7: Steps in the transformation from a contracted net to the logic equation for 
signal x. 

of s_ and Z a _ (Fig. 7.7a). In state 101, the implied value for x is chosen to be 0, as it 
results from the transition x_. Fig. 7.7a shows that regardless of whether logic element x 
is in state 101 or 001, transition x_ will always occur next and the circuit behaves exactly 
the same. The transition map is shown in Fig. 7.7b. The K-map derived from this state 
graph is shown in Fig. 7.7c where the logic equation is found to be 

x = Z a D a + xD a . 

This equation has the general form x = S + xR~ with S = Z a D a and R = Z7 a . Its 
implementation is a set-reset nipflop whose output is x, the set and reset inputs are Z a D a 
and D~ a , respectively. In order for this implementation to work properly, it is required that 
S.R = at all times. 

Similarly, the same procedure can be applied to other contracted nets to obtain the 
logic equations for L r and D r . They are 

L r = VrX-la 

D r = Z r + L a + D r ¥. 

The equation for D T can be rewritten as D T = S + D T R~ with S = Z r + L a and R = x, 
and it is implemented as a set-reset flipflop. The contracted net of D r in Fig. 7.5b shows 
that there is a time period during which both Z r and x are high, causing both the set and 
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Figure 7.8: The final circuit realization of the self-timed controller. The controller's initial 
state is Z T = Z a = L r = L a = x = LB = 0, D r - D a = 1. 

reset inputs of the I> r flipflop to be active. This violates the condition that S.R = at all 
times. However, it also indicates that output D r is not to be reset until after both Z T and 
L a go low, and therefore, until after the set input goes low. Therefore, this circuit can be 
implemented as a set-dominant flipflop (indicated by S* in Fig. 7.8). One can also choose 
to implement D r directly from the equation given above instead of a set-reset flipflop and 
not to worry about this particular detail. 

Finally, by putting all these elements together, one obtains the control circuit for the 
A/D converter as shown in the dashed box in Fig. 7.8. The self-timed control circuit 
shown is speed-independent, i.e., it operates correctly with any combination of delays 
of logic gates, assuming that the internal feedback delays of the flipflops are negligible 
compared to other loop delays in the control circuit. 



7.3 Summary 

In this chapter, STGs have been used as a specification tool for asynchronous control 
circuits. A STG specification can be viewed as an interpreted Petri net in which each 
transition is identified with a signal transition in a hardware circuit. In the synthesis 
approach proposed, state graphs are generated from a STG and then used to derive logic 
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equations and hardware structures for the signals. In the above specification and design 
example, it has been shown how introducing additional constraints in a STG allows us to 
use level-sensitive hardware circuits instead of transition-sensitive hardware circuits in its 
implementation. These are precisely the persistency constraints which guarantee speed- 
independent (and therefore hazard-free) implementation. 

A STG specification can thus also be viewed as a concise yet more abstract notation for 
specifying a class of state graphs. As specifically illustrated through examples above, most 
of the complex interactions of digital control circuits at the signal level can be lifted to our 
abstract representation using STG notations. At this higher level, one can guarantee live 
and hazard-free operation of control circuits by simply satisfying syntactic conditions on 
STGs. This, perhaps, is the most important point of our graph-based approach. 

The module descriptions used in this chapter require only constructs for specifying 
sequencing and concurrency. There are other behaviors which exhibit conflict and data- 
dependent signal flow that would require additional STG constructs for their specification. 
The formulation and application of these latter constructs are presented in the next chap- 
ter. 



Chapter 8 

Signal Transition Graphs with 
Non-input Choices 



8.1 Introduction 

The Signal Transition Graphs considered so far belong to a class of interpreted free- choice 
nets. By restricting transitions which are in direct-conflict to those of input signals, free- 
choices can be used to specify (nondeterministic) input choices to a control module. Thus, 
in addition to sequential and concurrent operations, these STGs can also specify input 
choices. In practice, however, this ability is only of limited use. More often, one also needs 
to specify control operations involving choices of internal events — the particular choice of 
which control event to execute depends on the state of certain control variables. In this 
chapter, instead of purely free choices, we consider cases in which choices are controlled 
by the state of certain conditions (which hold due to the firing of some signal transition in 
the circuit). This gives rise to the class of nets with controlled- choices. 

There are two alternatives for extending nets to permit the specification of controlled- 
choices, as illustrated in Fig. 8.1. We may choose a structural extension by using nets 
which are structurally more complex than free-choice ones, or we may choose a behavioral 
extension by developing new notations which permit the use of additional conditions to 
further restrict the sets of firing sequences of nets. 

Fig. 8.1a is a free-choice: whenever p is marked with one token, both ti and t 2 are 
enabled and one is nondeterministically chosen to fire. Fig. 8.1c is the corresponding 

139 



140 CHAPTER 8. STGS WITH NON-INPUT CHOICES 



X XXX X 




,6 
ft t* ft" t» 

foj free choice (b) controlled choice (c) input choice (d) non-input choice 

Figure 8.1: Structural and behavioral extension to the FC net model. 

situation for STGs called an input choice, in which t x and t 2 are interpreted as transitions 
of input signals; the decision of which transition to fire is made externally to the system 
and hence appears to be nondeterministic. 

A structural extension to free-choice nets to allow the specification of controlled-choices 
is depicted in Fig. 8.1b. This net specifies a controlled-choice if whenever transition u 
is about to fire (thus marking place p), a token must have already been present at ei- 
ther place p x or pa. Then exactly one of t u t 2 is enabled and the enabled transition will 
fire— nondeterminism never arises in this situation. Fig. 8. Id illustrates the corresponding 
situation in STGs, called non-input choices, i.e., choices involving transitions of internal or 
output signals. In contrast to the input choice in Fig 8.1c where t x and t 2 are transitions 
of input signals, here they must be transitions of non-input signals. The arc labels a and 
6 are logical variables which indicate, respectively, whether places py and pa are marked at 
the moment p receives a token. For example, we can pick a = {i, l),b= {i, 0) and u x = i + , 
u 2 = i- Then a being true means that signal i becomes 1 after transition i+ has fired; a 
being false means that signal i ceases to be 1 (due to the firing of «'_), etc. 

As will be discussed in more detail, the behaviorally extended net in Fig. 8. Id can serve 
as a correct specification of non-input choices only if the following two conditions are met: 

(i) Only one of the logical variables a and b can become true whenever p is marked. 
(If both can hold simultaneously when p is marked, this controlled-choice becomes a 
free-choice. Thus, free-choice nets can be considered as a special case of controlled- 
choice nets.) 

(ii) Transitions whose firings cause a and b to hold are not concurrent with u (in the 
above example, these transitions are u x and u 2 , respectively). This condition means 
that whenever p is marked, it is guaranteed that at least one of its output transitions, 
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ti or t-}, is enabled. Otherwise, if ui,u 2 are allowed to fire concurrently with u, it is 
generally impossible to determine the state of variables a and b when p is marked. 
This condition is a fundamental requirement of the proposed behavioral extension; 
further discussion will be given when we present the unfolding algorithm in Chapter 
9. 



Under these provisions, controlled choices can be viewed as additional restrictions on the 
set of firing sequences specified by a FC net. As such, they are a behavioral extension to FC 
nets. The reason for avoiding a structural extension is that to date, an acceptable structure 
theory is available only for the class of free-choice nets. Techniques for structural analysis 
of more complex nets which are useful for our purposes have not been fully developed. 

This chapter describes this extended class of interpreted nets called STGs with non- 
input choices (STG/NCs), their notations and semantics. To distinguish them from STGs 
described in earlier chapters, we call the latter STGs with input choices (STG/ICs). The 
behavior of STG/NCs will also be defined in terms of firing sequence semantics. From 
the behavioral standpoint, a STG defines a set of firing sequences which has an equivalent 
state graph representation. An STG can thus be viewed as an abstract representation of 
a state graph. 

In Section 2 we will consider the underlying idea of specifying non-input choices in 
terms of state graph representations. In particular, we discuss the deficiency of state 
graphs for modeling non-input choices and a simple solution to this problem. This leads 
to a notational extension to the STG model, as described in Section 3. This section also 
describes the syntactic definition of STG/NCs and their firing rule. In Section 4, a design 
example is carried through to informally illustrate the main ideas. This example describes 
the synthesis of a FIFO controller which operates using a two-cycle signaling protocol. One 
unusual feature of this design is that its STG specification contains both concurrency and 
internal choices, in contrast to other synthesis approaches which restrict the specification 
to sequential processes, and thus cannot specify both internal choice and concurrency at 
the same time. 
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8.2 The Basic Idea 

In this section, through a number of illustrative examples, we demonstrate a fundamental 
difficulty in modeling internal choices in the class of finite automata corresponding to state 
graphs. After identifying the cause of this problem, we suggest a solution which necessitates 
the use of a higher level representation for state graphs — this being STGs with non-input 
choices, as described subsequently. 



8.2.1 A fundamental problem with specifying non-input choices 
in state graphs. 

Recall that a state graph $ denned on a set of signals J is given by $ = (S, T, 6, s ) where 
S = {s : J — ► {0, 1}} and T = J x {+, -}. J and T can be partitioned into input, internal 
and output sets, denoted by subscripts i", N and O, respectively. For convenience, we 
also define non-input sets as the union of internal and output ones, and denote them with 
subscripts NI. 

In $, suppose that there exists a configuration shown in Fig. 8.2a, with s 1 [u)s 2 , s 2 [ti)s 3 [t 3 ), 
^to^fo), where u is the only transition enabled in state 8 X . According to the previous 
definition of enabling and disabling, this situation corresponds to uEt x and uEt 2 in s x . 
Since t x and t 2 are enabled in the same state and t 2 & T E (s 3 ), t x £ T E (s 4 ), they correspond 
to transitions in direct conflict. (Recall that Te(s) denotes the set of transitions which are 
enabled in state s.) 

As argued below, whether t x and t 2 are indeed in direct conflict, that depends on 
whether they are transitions of input or non-input signals. For the sake of argument, let 
us consider the direct conflict in Fig. 8.2a purely as a specification intended for specifying 
a nondeterministic choice in some control module. Due to the fact that in a state graph, 
transitions behave differently depending on their type (input or non-input), whether this 
specification is in fact a choice that will depend on the type of the transitions. For state 
graphs, transitions of input signals are caused by the environment, whereas non-input ones 
are caused by the system itself. The occurrence of the latter is determined solely by the 
internal delays of the system and hence, cannot be known exactly. Below, these cases are 
examined. 
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Figure 8.2: (a) A state graph specification with t^ and f 2 enabled in the same state, (b) If 
ti,fa -fi u then t\ and t 2 are concurrent, (c) If t\ = u then t 2 is non-persistent. 

If t\ , <2 € T/ then as discussed in Chapter 5, it is an input choice. Furthermore, ti and t 2 
can be assumed to be persistent; their persistency can be guaranteed by the environment. 
On the other hand, if t\, t 2 & Tj then the specification of Fig. 8.2a doesnot guarantee that 
t\ and t 2 will be persistent or that they may occur concurrently, as explained below. 1 



• h, h t£ « '• Since uEt\ in si and t 2 ^ "> the occurrence of t 2 in s 2 brings the system 
to S4 in which t\ must still be enabled: 34[ii). Similarly, since uEt 2 and t\ ^ u, we 
can also conclude that s 3 [t 2 ). Hence t lt t 2 £ T/ U {it} => s 2 [ti)8 3 [t 2 ) A s 2 [t 2 )s 4 [ti), and 
this means that ti and t 2 are in fact concurrent (Fig. 8.2b). 

• ti — u or t 2 = u : Suppose that ii = u and <2 ^ « (the other case with h ^ u and 
£2 = u can be treated in a similar fashion). As before, since uEti in si and t 2 ^ «, <i 
must still be enabled in s 4 . However, since uEt 2 in s x but t\ = u, the occurrence of t\ 
in a 2 brings the system to state s 3 in which t 2 is no longer enabled (Fig. 8.2c). Hence, 
t\ disables t 2 in s 2 thus causing t 2 to be non-persistent. The obvious implication of 
this is that in the corresponding hardware implementation, an occurrence of t 2 can 
cause a hazard which may lead to malfunction. 



The above analysis shows that state graphs can only be used to specify input choices. 
If a specification involves non-input transitions enabled in the same state, due to the fact 
that their occurrences are controlled internally, these transitions will occur concurrently 
or produce hazards — neither case is desirable. 



*We do not consider cases with ti € Tj A <2 £ Tj or <2 € 7> A ti £ T/ because these involve choices 
between input and non-input signal transitions. 
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8.2.2 Specifying non-input choices in state graphs. 

Consider the state in Fig. 8.3a. Since x and y are enabled in the same state s and they 
are transitions of input signals (input transitions are underlined), they indeed specify an 
input choice. In contrast, t x and t 2 are enabled in the same state s 2 , but since they are 
transitions of non-input signals, they may be non-persistent or concurrent, as discussed 
earlier. Hence, this state graph cannot be used to specify a non-input choice as intended. 

Now, suppose that once transition u has occurred and the system has settled in state 
s 2 , we want the system to perform the following decision: 

• enable transition ti only if x had occurred previously, and 

• enable transition t 2 only if y had occurred previously. 

It can be seen that for the state graph in Fig. 8.3a, this type of decision is impossible 
because as soon as the system reaches state s lt it looses the knowledge of which of x or y 
had occurred. In order to allow for non-input chokes, we must "split" states si and s 2 into 
pairs {s[,s"} and {s' 2 ,s%}, respectively (Fig. 8.3b). In this state graph, once transition u 
has occurred, the enabling of t t is conditional on the occurrence of x and likewise, that of t 2 
on y. Furthermore, by splitting state s 2 , <i and t 2 are no longer enabled in the same state; 
the problem discussed above no longer exists. Thus this simple technique provides not 
only a way for specifying non-input choices but also a nice solution to the above problem. 

As discussed next, the proposed solution gives rise to another problem, thus indicating 
a fundamental deficiency of state graphs in specifying non-input choices. Suppose that 
one is given the state graph in Fig. 8.3b. By noticing that uEh in s[ and uEt 2 in s'{, one 
may be able to deduce that t x and t 2 are possible internal choices after the occurrence of 
u. However, in general, the exact condition which causes a particular choice cannot be 
determined precisely: by inspecting only the state graph, the condition which causes the 
choices of t x may be due to the occurrence of either one of x or < 5 ; similarly that t 2 may 
be due to either one of y or tg. 

In order to specify the exact conditions for non-input choices, new notations need to be 
introduced, as illustrated in Fig. 8.3d. The output arcs of place p are labeled with control 
variables a and b where, for instance, a = (i, 0), b = (i, 1), x = t_ and y = i+. In this case, 
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Figure 8.3: (a) A state graph intended for specifying an internal choice between t t and t 2 . 
(b) The correct way for specifying internal choice between t x and t 2 . (c) The STG for the 
state graph in (a), (d) The STG for the state graph in (b). 

for example, when a; fires, a becomes true and t x will be enabled. This STG can be viewed 
as a high-level representation of the state graph in Fig. 8.3b, and can be distinguished 
from the STG without these labeled arcs shown in Fig. 8.3c. 

Before giving a precise syntactic characterization of STGs with non-input choices, the 
following remarks are in order. 

• The use of arc labels in STGs allows one to specify non-input choices and the exact 
conditions which control the choices; such a capability is not supported by free-choice 
nets. An immediate implication of this extension is directly related to the hardware 
implementation: in the decomposition stage for logic implementation, signals corre- 
sponding to these conditions must also be included as input to a logic element. For 
example, in Fig. 8.3d signal t must be considered as an input to logic elements j and 
k, where t x = j* and t 2 = k m . 

• The controlled-choice notation has significant ramifications in our formulation of 
STGs in that it allows us to restrict the number of appearance of every transition 
in T to no more than once in a STG specification, and this is consistent with our 
previous formulation. (Recall from Chapter 2 that this restriction is necessary to 
prevent the confusion between concurrency and nondeterminism in the corresponding 
state graph representation.) 

• In comparison with free-choices, controlled choices can be viewed as a further restric- 
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Won on the sets offiring fences. For example, the set of firing sequences for the 
^-cho,ceca«,n F,g. 8.3c is {^t lh , xU u h U,y U ut^y,^ tl} , whereas that for 
the controlled cho,ces m Fig. 8.3d is restricted to the subset {x t sU t lh , yt^tj. 

8.3 STGs with non-input choices 
8.3.1 Syntax 

d'f el rfoC^' CWeS (STG/NCS) ° f * "*" — •"" * - <* *- ' i- 

• (P,T,F,M ) is a LSFC net satis fvina the nn, *„l.* n eu * ■ +■ 

nfn G - 4 ' , sa ™iy™9 me one-token SM restriction, with the addition 

of a finite set ./dummy transitions denoted by S: F C (P x (TU£))U((TUS) x P). 

• The arc labeling function A:F^x { 0,l} Mfl partial function W ith 

dom ( x ) = {(*,y)eF\ x€ P Alx . l>lA(yeTmUS)h 

i.e., dom(X) C F D (P x (T m U £)). 

The set 5 = {e , C2 , . . . , e ro } is a finite set of dummy transitions, each member of S is really 
a silence transition whose purpose will be discussed shortly. % 

In the graphical representation of arc labels injy/nil ™ • ' j 

1) and /V n\ . .• , . * ' '' we use J- and 3 to denote 

1) and 0,0) respect.vely. An arc label 0,0) represents a control variable which holds 
whenever signal j is equal to 0. d 

We further require that for a place peP such that 



\P-\>1, 



• either p- C 7} (in which case p is called a free-choice place) 

• or p. C T W U 5 (in which case p is called a controlled- choice place). 
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Figure 8.4: (a) A STG with non-input choices and (b) abbreviating the dummy transition. 

Thus a STG/NC may contain both free choice and controlled-chpice places, while a STG/IC 
may contain only free-choice places. 

The introduction of the dummy transition e is a mere technicality: in situations involv- 
ing non-input choices (as illustrated in Fig. 8.4a), when px is marked, if control variable 
a holds then <i,< 2 ,<3 occur in sequence; otherwise, if a holds then only t 3 will occur (the 
exact meaning of "hold" will be given shortly). The dummy transition e serves as a place 
holder to avoid too many changes to the syntax of STGs and their firing rule: without it, 
we must extend F to P x P and change the firing rule accordingly. For convenience we 
will draw an arc directly between two places whenever an e-transition is encountered, as 
done in Fig. 8.4b. Thus, the use of dummy transitions is restricted to the following cases: 

V(s,y) €F if y<=£ then / ^a G J x {0, 1} : A((x,y)) = a and 

1 3p!,p2 G P : |pi • | > 1 A -y = {&} A | • pi\ > 1 A y = {&} 



8.3.2 Firing rule 

The firing rule for STG/NC is exactly the same as for Petri nets, i.e., whenever a transition 
(including the dummy transition e) is enabled, its firing will remove one token from each of 
its input places and one token is added to each of its output places. However, the enabling 
condition for STG/NC is slightly different: 

• For every transition t with no labeled input arcs, t is enabled the usual way: M[t) 
iff Vpe-t,M(p)>l. 
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• For every transition t with the input arc labeled with a, e.g. -t = {p} and A(p, t) = a, 2 
then M[t) iff (i) Vp € -t, M(p) > 1 and (ii) the condition a holds at M. 

We say that condition a holds at marking M 

• for the case a — (j, 0) iff at M, transition j_ has fired ond j+ has not; 

• for the case a = (j, 1) iff at M, transition j+ has fired ond j_ has not. 

In other words, if s is the binary state corresponding to marking M, then the holding of a 
at s means that s(j) = for the case a = (j, 0), and s(j) = 1 for a = (j, 1). 

The above rules should provide an adequate recipe for determining the sets of firing 
sequences and their equivalent state graphs from STG/NCs. This is accomplished by 
determining at every marking the enabled transitions and by firing them to reach a new 
marking, and so on. However, in order to use them effectively, we need to enhance the 
analysis power for this type of STGs. Fortunately, a STG/NC can be converted into 
one containing only free-choice places by first unfolding it into an occurrence net and 
then folding it back into a free-choice net. Such procedures constitute the main steps of 
an expansion algorithm described in the next chapter. For free-choice nets, the results 
developed earlier in the thesis can be used directly. The presentation of this expansion 
algorithm necessitates the introduction of occurrence nets and processes generated from 
Petri nets, as will be discussed later. Below, we illustrate the use of STG/NCs with 
a design example of a FIFO controller, which uses a two-cycle handshake protocol for 
external communication. 

8.4 An example: a two-cycle FIFO controller 

We discuss an example of a STG specification of a two-cycle FIFO controller. The main 
objective of this example is to show the expressive power of this extended STG model 
and the type of asynchronous circuits that can be synthesized from it. To provide some 
intuition, an informal description of the expansion algorithm mentioned above will follow. 
The synthesis steps to produce the circuit realization will also be outlined. 



2 From now on, we write \(x,y) for X((x,y)). 



8.4. AN EXAMPLE: A TWO-CYCLE FIFO CONTROLLER 149 

The block diagram of the FIFO module is shown in Fig. 8.5a, a timing diagram describ- 
ing its operation in Fig. 8.5b. The FIFO module has three control links, each being a pair 
of request/acknowledge signals. At the input link, 72, makes a transition each time new 
input data is available; A { makes a transition each time the data has been used and the 
module is ready to accept new data. At the output link, R makes a transition whenever 
the module has stored data, and A makes a transition whenever the succeeding stage has 
accepted the data. Link {£, D) is connected to a fhpflop which simulates the data storing 
operation. Signal L makes a transition to load data into the registers, signal D makes a 
transition when the loading operation is done. For every cycle of operation, the signal L 
serves as a load pulse to control the input gates of register cells. This FIFO cell operates 
in a pipelined fashion by coordinating transitions at the input and output links. In this 
STG specification of the FIFO module, transitions of signals at the input link {J r , I a } can 
occur concurrently with those at the output link {O r , a }. 

The STG specification for this circuit is shown in Fig. 8.5c, in which the output arcs 
of places pa and pa are labeled with variables D and ij„ respectively, and there are no 
free-choice places. Formally, the labeling function A is denned by 

A(p 1 ,A,_) = (D,0) and A( ft , A i+ ) = (£>,1) 
Afo, £>+) = <!?,., 1) and A(p3,D_) = {iJ t .,0). 

The set {D, R { } can be used to form the control states which dictate the choice between 
alternate control sequences. 

In the initially marking M„ = {p s ,(A i .,R i+ )}, transition R i+ is enabled. The initial 
state of the system is s = 000000, where states are vectors of binary values of signals in 
(Ri, A h L, D, R , A ). After the firing of i2,+ and subsequently, L + , place p, is marked. At 
this marking, the condition (Ri, 1) holds (because R i+ has just fired), thus enabling £> + . 
After D+ has fired, L. may fire concurrently with the sequence R 0+ , A 0+ , marking places 
Pi and p 5 . At this marking, A i+ is enabled due to the holding of the condition (D, 1). Thus 
one can "execute" the net and expand it into one shown in Fig. 8.5d. In this figure, there 
are two instances of L+ denoted by L% and L\ and two instances of £_, likewise denoted. 
The finite automaton derived from this new STG is given in Fig. 8.5e, from which it can be 
seen that there is no state at which both A i+ and A { _ (similarly, D+ and Z>_) are enabled. 
Hence, by using arc labels to perform decisions, we have in effect "split" states which could 
have otherwise involved conflicts between transitions of non-input signals D and A,-. 
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Figure 8.5: (a) The block diagram of the two-cycle FIFO controller, (b) its timing di- 
agram, (c) its STG/NC specification which can be expanded into a STG/IC (d). (e) 
The state graph of the STG/IC in (d) L (f) The control-state graph, (g) The final logic 
implementation, with L = DA Tli + TJA Ri. 
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It is useful to construct from Fig. 8.5d a state graph which consists only of control 
variables i?„ D. Such a state graph (Fig. 8.5f ) is called a control-state graph (CSG) and 
is obtained by performing T'-contraction on the state graph in Fig. 8.5e, where T" = 
{Ri,D} x {+,-}. A CSG contains only control states and it allows one to tell which 
choice is made at free- and controlled-choice places in the STG. 

From the STG in Fig. 8.5d, the synthesis procedure described earlier can be applied 
directly to produce the logic equations and structure of the circuit. The only minor dif- 
ference is that we need also to include the control variable D in the input set of A t , and 
Ri in the input set of D. The input sets are given below, from which the structure of the 
logic circuit can be determined. 

I(Ai) = {L,D} 

I{L) = {R^A^D} 

1(D) = {L,i2j 

I(R ) = {£>}. 

The circuit diagram for the FIFO cell is shown in Fig. 8.5g. There are two latches which 
pass the input D to output Q if the gating signal G is active, and hold the output if G is 
inactive. Their logic functions are Q = DG + Q(G + D). The logic function for signal L 
is L = DA ~R~i + ~DA Ri. In a practical design, it is intended that the delay of the latch 
whose output is D be used to "time" the latching operation of the data registers for each 
stage of the FIFO. This circuit is completely speed-independent and has no problem with 
hazards, including the type called delay-hazards, under the following assumptions: 

• Logic gates have unbounded delays, wires have no delays. 

• The internal feedback delays of the latches are negligible compared to other loop 
delays. 

Remarks. In the STG/NC (Fig. 8.5c) non-input choices are specified using controlled- 
choice places pi and p^. These illustrate an important underlying mechanism when one 
considers STGs as a high-level representation of state graphs, which is the following: 

• For a free-choice place, e.g. place po with pt,- = {x,y} C T/ in Fig. 8.3c, in the 
state graph, there exists a state in which both x and y are enabled (Fig. 8.3a). This 
represents an input choice. 
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• For a controlled- choice place, e.g. place pi with pi- = {A,-_, A i+ } in Fig. 8.5c, in 
the state graph (Fig. 8.5e), there exists no states in which both 4,-_ and A i+ are 
enabled. Thus a controlled-choice place indicates that its corresponding state in the 
state graph must be split so that each non-input choice is enabled in a different 
state. This is carried out by expanding the net to one shown in Fig. 8.5d, in which 
all non-input choices have been determined and removed by unfolding the original 
net. In the state graph, the states in which A,_ and A.+ are enabled (say s and s', 
respectively) are guaranteed to be different because the value of signal D is chosen 
such that it is different in these states: s(D) — and s'(D) = 1. Hence the use of 
arc labels ensures that split states have different binary representations. 



Chapter 9 

The Expansion Algorithm 



In this chapter, we describe an algorithm for converting STGs with non-input choices 
(STG/NCs) into STGs with input choices only (STG/ICs). This algorithm involves un- 
folding a STG/NC into a process and then folding the latter back into a STG/IC — a proce- 
dure called expansion. The underlying idea of the expansion algorithm can be understood 
by viewing STGs as high-level representations of state graphs. At the end of Chaper 8, we 
have emphasized that for a free-choice place, there exists a state with input choice, and 
for a controlled choice place, there exists a state with non-input choice. By manipulating 
the STGs, one can manage to split states with non-input choices in their corresponding 
state graphs. Specifically, this is carried out in two stages. In the first stage, all states 
with input and non-input choices are split; this is done by unfolding the STG/NC into a 
process. In the second stage, only states which previously involve input choices are merged 
back together; this corresponds to folding the process back into a STG/IC by merging only 
free-choice places. 

This chapter is organized as follows. In Section 1, we describe yet another type of 
primitive nets called occurrence nets, which are commonly used for describing the semantics 
of higher level nets. In particular, the "execution" of live-safe Petri nets basically unfolds 
them into occurrence nets called processes. We will develop a number of useful properties 
for processes of nets and use them to derive some important results for processes of STGs. 
These results are required in the expansion algorithm described in Section 2. In this 
section, algorithms for net unfolding and folding of LSFC nets are given in order to motivate 
the development of the expansion algorithm which converts a STG/NC into a STG/IC. 
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Once a STG/IC is obtained, the synthesis procedure described in earlier chapters can be 
applied directly, as illustrated in an example at the end of Section 2. In Section 3, we 
study properties of STG/NCs, including liveness and the characterization of the temporal 
relation in these nets. Finally, Section 4 summarizes the main ideas and provides some 
remarks concerning our techniques. 

It is important to note that this extension to the theory of Petri nets is a part of 
structure theory and hence, all results are guaranteed to apply only to nets which satisfy 
the one-token SM restriction stated earlier. 

9.1 Occurrence nets and Processes of nets 

In this section, we introduce a type of acyclic net structures called occurrence nets, being 
partial orders whose elements are conditions and events, together with a binary relation 
specifying the precedence relationship between these elements. Occurrence nets can be 
used as semantics for Petri nets: by executing a Petri net, one can unfold it into an 
occurrence net, and each execution produces an occurrence net called a process. 

As argued earlier, for our purpose of using nets for synthesis of control systems, se- 
mantics based on firing sequences are more useful than those based on partial orders. Our 
chief motivation for presenting occurrence nets and processes is to provide a technique for 
net unfolding, which is part of the expansion algorithm described later. 

9.1.1 Occurrence nets 

Consider a type of elementary net structures represented by N = (B,E,H), where 

• B is a set of conditions (similar to places and depicted likewise), 

• E is a set of events (similar to transitions and depicted likewise), 

• H CE x BUB x Ej^fb is the flow relation, 

subject to the following restrictions: 

• EC dom(H) U range(H) (no isolated events) and 
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• V6 l5 63 € B : (•&! = -63) A (&r = V) =* 61 = 62 (the net is pure). 
Then N is an occurrence net iff 

• V6 € £ : \b ■ I < 1 A I • b\ < 1. 

• Vx, j/ € £ U £ : x#+y => -.(y#+x) where #+ denotes the transitive closure of H 
(H + is irreflexive). 

For JV, we also define the sets of boundary elements as follows: 

°N = {xe£U£|-x = 0}, 
N° = {x€BUE\x- = 9}. 

From an occurrence net, one can define a partial order 1 {X,H + ) where X = B U E. 
Ordering and concurrency (unordering) between elements in X can then be defined as 
follows. For every x, y 6 X, x and y are 

• ordered, denoted as {x, y} g/ton li y, iff (xH+y) V (yH + x); 

• concurrent, denoted as {a:, y} £ co or x coy, iff -i(x-H" + y) A ->(yH + x). 

The notions of chains, lines, antichains and cute can be denned as follows. 

• / C X is a chain iff Vx, y € / : x /i y; a line is a maximal chain. 

• c C X is an antichain iff Vx, y € c : x coy; a cut is a maximal antichain. 



Also, b-cuts and e-cttta denote cuts consisting only of elements in B and E, respectively. 
Note that for LSFC nets, we use li and co to denote ordering and concurrency relations; 
these are characterized directly on LSFC nets, in contrast to the above relations which are 
defined on occurrence nets. 



1 A partial order is defined here as a set together with an irreflexive and transitive binary relation. 
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9.1.2 Processes of nets 

Informally, a process of a Petri net is an occurrence net obtained by unfolding a Petri 
net into an acyclic structure involving only ordering and concurrency but no conflicts. 
For example, given a Petri net which is a simple cycle fttj ftt, . . . p n t nPl with ft initially 
marked, by unfolding this net one obtains an occurrence net corresponding to a line: 

p\tyA--Pity,t\ P \t\...^tip\... 

where superscripts are used to denote instances of places or transitions. Even though nets 
can generate infinite processes, for all practical purposes, finite processes are adequate. 
Hence unless explicitly stated otherwise, we consider only finite processes. Formally, a 
process of a net is defined as follows [42]. 

Definition 9.1 Let S = (P,T,F,M ) be a Petri net and N = {B,E,H) an occurrence 
net with °N, N° C B. Then PN = {B,E,H;<I>) is a process ofXiff<f>:B\JE->P\JTis 
a surjective function satisfying the following conditions (<f> is extended to <f> : V(B U E) -+ 
V(P U T) in the obvious way): 

(a) <1>{B) C P A <f>{E) C T. 

(b) Ve <E E, V< € T : <j>{e) = t =► <f,(. e ) = -t A <6(e-) = t-. 

(c) cf>(°N) C{peP\ M (p) = 1}. 

(d) Vn,xa € B U E : <f>{ Xl ) = <j>{x 2 ) <* Xl lix 2 . 

Condition (a) states that the mapping is type preserving: conditions map to places, 
events map to transitions. Condition (b) further states that if an event e maps to a 
transition t, then c's input (output) conditions map to <'s input (output) places. Condition 
(c) requires that °N map to a subset of initially marked places. Finally, condition (d) states 
that two instances in the occurrence net map to the same element in the Petri net iff they 
are ordered; this is an important point to which we will return shortly. 

Usually, we let E C T x {0, 1,2,.. .}, so that events in E correspond to instances of 
transitions in T. For t € T, its instances in £ are denoted by t°,t\t 2 ,... and hence 



9. 1 . OCCURRENCE NETS AND PROCESSES OF NETS 



157 





(c) 



Figure 9.1: (a) A LS marked graph and (b) one of its processes, (c) The finite automata 
representation derived from the trace set of (b). 
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<f>({t°, *\ * 2 , ...}) = {t }. Similarly, we let B C P x {0, 1,2,.. .}, so that conditions corre- 
sponding to instances of a place p are denoted by p°, p 1 , p 2 . . . and hence ^({p ,^ 1 , p 2 , ■■■}) = 
{p}. Processes always start and end with b-cuts: °N,N° C B, as shown in Fig. 9.1b. 

The notion of process is closely connected to the execution of live-safe mark graphs. 
In fact, a LS marked graph can be directly unfolded into a process without the omission 
of any transition during unfolding. Fig. 9.1a is a LS marked graph which can be unfolded 
into the process in Fig. 9.1b. This process possesses a certain periodicity: it repeats the 
same behavior whenever it reaches a b-cut which maps to the initially marked places in 
M . 

9.1.3 A few results for processes of LSFC nets 

Most of the results developed earlier for LS marked graphs can be applied to processes 
with some slight modification. As remarked at the beginning of this section, a live-safe 
Petri net which is a simple cycle unfolds into a line, as defined earlier. For LSFC nets, we 
define two elements of a net to be ordered iff they belong to a simple cycle. This means 
that in a process generated from a LSFC net, all ordered elements belong to the same line. 
Thus for LSFC nets, the above fact generalizes as follows. 

Lemma 9.2 Let £ = (P,T,F,M ) be a LSFC net satisfying the one-token Sm restriction 
and PN = (B, E, H; <f>) a process of £. Then for every x, y G P U T: 

(a) If {x,y} G li U cf then there exists a line in PN to which all instances of x and y, 
x\y j eBUE, belong. 

(b) If {x,y} G co then there exists no line in PN to which all instances of x and y, 
x\ y j G B U E, belong. 

Sketch of proof. For part (a), if {x, y} G li then this is a formal statement of the fact that 
a simple cycle unfolds into a line. If {x, y} G cf then x, y must belong to a SM-component 
which is live-safe of £. This SM-component must also unfold into a line in the process PN 
as at any marking, exactly one of its places can be marked and no more than one of its 
transitions is enabled. 
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For part (b), if {x, y} G co then there exists no simple cycle in E to which both x,y 
belong, and there exists a MG-component containing both. It is simple to verify that 
in this case, when the MG-component is unfolded, there cannot be a line containing all 
instances of x and y. m 

From this lemma, we can further deduce that since every x e PUT belongs to the 
same simple cycle with itself, there exists a line in PN to which all instances of x belong. 
Another consequence of the above lemma is that a p-cut in a net corresponds to a b-cut in 
its process. Since a p-cut represents a set of places which can be marked concurrently and 
hence corresponds to a marking of a net, a b-cut is a record of the holding of a marking 
of the net. Similarly, there is a correspondence between t-cuts and e-cuts; the former 
representing a set of concurrent transitions, the latter a set of concurrent events. 

Chapter 3 has provided a semantics of LSFC nets based on firing sequences. For the case 
of LS marked graphs, their sets of firing sequences can be obtained by weaving the sequences 
derived from a set of simple cycles which cover the nets. This result can be adapted 
directly to occurrence nets to allow the determination of their corresponding trace sets and 
equivalent automata. For example, the trace set of the process in Fig. 9.1b can be obtained 
by first choosing a set of lines which cover the structure, deriving their corresponding 
traces and weaving them. The equivalent automata representation for Fig. 9.1b is given 
in Fig. 9.1c. This idea can be formalized as follows. In an occurrence net N = (B, E, H), 
a set of lines L = {h, J 2 , . . . , / n } covers net N iff V{a;, y) 6 H, (x, y) belongs to some line 
J, in N. For a line f, = 6 1 e 1 6 2 e 2 . . . c TO 6 TO , 2 its FA (denoted as FAf) can easily obtained by 
considering conditions as states and events as transitions between states. Then similar to 
the construction algorithm in Chapter 3, the equivalent FA of a process N (denoted as 
FAn) is given by 

FA N = FA 1 \\FA 2 \\...\\FA n . 



9.1.4 Processes of STGs 

Instead of considering processes generated from LSFC nets, we consider those generated 
from STGs. The main difference is that a process PN = (B,E,H;<f>) generated from 
an STG Sj = (P, T, F, M ) contains events which map to complementary pairs of signal 

2 Note that in a process, every line starts and ends with a condition in B. 
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transitions: Vi G T 3e,-, e, € E such that ^(e.) = t and ^(e,-) = t. As mentioned earlier, 
a b-cut in a process corresponds to a marking of a net. For processes of STGs, such a b- 
cut has a corresponding binary representation s. Similar to the state-assignment function 
denned in Section 4.2, let a : V{B) -> S be a mapping from b-cuts to binary states. This 
mapping provides a mechanism for establishing the correspondence between b-cuts in a 
process and binary states in the state graph. This mechanism is required for the following 
two purposes: 

(a) In unfolding a STG/NC into a process, we may reach a b-cut which contains a 
controlled-choice place. At that point, we need to evaluate which control variable 
holds in order to proceed with unfolding the net. This mechanism allows one to 
determine the states of control variables from the process generated thus far. 

(b) In folding a process into a net, we "merge" b-cuts in the process which correspond 
to the same binary state. Again, this mechanism permits one to determine whether 
two b-cuts have the same binary representation. 

Below we consider these two cases. Due to the similarity between processes of nets and 
marked graphs, most of the results developed earlier for marked graphs and STGs can be 
applied to processes of STGs with only a slight modification. In the following, we state 
most of the results without proof and only appeal to their close relation with results for 
STGs. 

The conditions on a process so that its equivalent FA has a consistent state assignment 
(c.s.a. for short) are similar to those for marked graphs. For brevity, in the following, we 
refer to a process or a net satisfying the conditions so that its equivalent FA has a cs.a. 
simply as a process (or net) with a c.s.a. 

For t e T, let E(t) = {e £ E \ <j>(e) — t], the set of events which map to transition t. 
Then the process PN has a c.s.a. iff Wt £ T, there exists a line / in PN such that 

(a) every element in E(t) U E(T) belongs to I, and 

(b) elements in E(t) and E(f) alternate in I, i.e., 

either FS{1) f E(t) U E(T) = tWtW 
or FS(l) f E(t) U E(i) = <W*W .... 
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It has been shown in Theorem 4.8 that a STG has a c.s.a. iff each of its MG-components 
has a c.s.a. In such a STG, t and i are ordered for any pair of transitions t, i. Thus when 
it is unfolded, all events corresponding to t and t must belong to the same line and they 
must alternate. It follows that if a STG has a c.s.a. then every process generated from it 
has a c.s.a. Furthermore, according to Theorem 5.2, a STG is live only if it has a c.s.a. 
Hence, if a STG is live then each of its processes has a c.s.a. 

For distinct b-cuts Bi, Bj in PN, we also define the interval from 2?, to Bj (i < j) as 

[Bi, Bj] = {x € B U E | x belongs to a chain from Bi to Bj}. 

Let S{ and Sj be binary states corresponding to B, and Bj, respectively, i.e., s, = a(S,) 
and Sj = oc(Bj). Then in the equivalent FA of the process PN, every path a from «,• to Sj 
contains all events in [Bi, Bj] and therefore |<x| = \E D [Bi, Bj]\. 

An interval [Bi, Bj] forms a complementary set iff 

V* € T : \[Bi, Bj] n E(t)\ = \[Bi, Bj] n E(t)\. 

The following lemma states that b-cuts Bi and Bj have the same binary representations 
iff the interval [Bi, Bj] forms a complementary set. 

Lemma 9.3 Let Sj be a live STG and PN a process generated from it, as defined above. 
Then for every distinct b-cuts Bi, Bj in PN : 

a(Bi) = a(Bj) <&■ [Bi, Bj] forms a complementary set. 

Proof. If Sj is live, PN must have a c.s.a.. Let s,- = a(B.) and sj = a(Bj). U[Bi,Bj] 
forms a complementary set then every path a : Si[a)sj in the state graph of PN must 
contain (i) the same number of events e and e, where <f>(e) = t and <f>(e) = i for some t € T 
and (ii) they must alternate. In this case, it is simple to verify that 5,- = Sj. | 

Let Sj be a live STG and PN a process generated from Sj. Let B denote °N, then 
the initial state s and B are related by s = a(B ). The following lemma shows how to 
determine the binary state corresponding to any b-cut Bj in PN. 
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Figure 9.2: (a) At Bj, Sj(m) = 1. (b) At Bj, Sj(m) = 0. (c) At Bj, Sj(m) - s (m). 

Lemma 9.4 Let Ej = (P, T, F, M ) be a live STG defined on the signal set J and PN - 
{B, E, H; <f>) a process of Sj. Then for every signal m € J and for every b-cut Bj in PN, 
the value of signal m at state Sj = oc(Bj) is given by 



(a) Sj(m) = 1 if there exists Bi ^ Bj (i < j) such that m + 6 [2?,-, Bj] A m_ £ [Bi,Bj], 

(b) Sj(m) = if there exists Bi ^ Bj (t < j) such that m_ € [Bi, Bj] A m+ & [B^Bj]. 

(c) Sj(m) = So(m) otherwise, where sq = a(Bo), Bo = °N. 



The proof is quite easy; it hinges on the fact that in the process PN of a live STG, for 
every transition t £T the subsets of events E(t) and E(T) belong to a line, and furthermore 
PN has a consistent state assignment. Fig. 9.2 illustrates these cases. Note that in case 
(c), Bi = B and [B ,Bj] contains neither ra + nor m_. This means that signal m has not 
changed since the initial state sq. 
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9.2 The expansion algorithm for STG/NCs 

The expansion of STG/NCs consist of two algorithms: an unfolding and a folding one 
First, we develop such a pair of algorithms for FC nets; these algorithms are then modified 
into the expansion algorithm for STG/NCs described subsequently. 

9.2.1 Unfolding and folding of free-choice nets 

Processes of live-safe Petri nets can be generated by simply unfolding the nets, resolving 
conflicts along the way. For free-choice nets, unfolding is a simple procedure which is 
intimately related to the MG-reduction algorithm due to Hack, described in Chapters 2 
and 3. As before, for a Petri net <P, T, F), define an allocation function AP^T which 
allocates an output transition for every place, i.e. Vp S P : A(p) € p. In a free-choice net 
if a place p has more than one output transition then any one of them can be allocated 
arbitrarily. 

The following net unfolding algorithm unfolds the net iteratively and in each iteration 
A 1S determined only for a p-cut corresponding to the last set of conditions of the process 
generated thus far. (In contrast, in the MG-reduction algorithm, A is determined for all 
places in P at once.) In the following, Bi is used to denote a set of conditions generated 
during a step of unfolding, and it is not necessarily a b-cut. 

Algorithm 9.5 (Net Unfolding) Let £ = (P,T,F,M ) be a free-choice net and PN = 
(B, E, H; <j>) a process of £. Then PN is constructed by iteratively unfolding £ as follows. 

(a) Initialization: Let P C {p e P | M (p) = 1} such that P is a p-cut. 
Let i = 0. 

(b) One step of unfolding consists of the following. 

bl. Define Bi such that <£(£,) = P, and |S t | = |J>.|. 
be. Pick the allocation function A(P { ) and define 

T,- = {t 6 A(P { ) | ( Vj p G -0(36 € U Bj) : <f>(b) = p A b- = 0}. 
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bS. Define E { such that <£(£,) = T 4 and \Ei\ = \Ti\. 
b4. Define UH { C (Uo<j<« Bj) x E 4 such that 

(V6 G |J Bj\b- = 0)(Ve G E t ) : (<f>(b), #<0) G F«* (6, e) G UH t . 

65. let P, +1 = (Ti)-. Define B i+1 such that <j>(B i+1 ) = P i+1 and \B i+1 \ = \P i+1 \. 
b6. Define DH { C E { x B i+1 such that (x,y) G Dff,- •«• (<t>(x), <^(y)) G F. 
67. Let Hi = UHi U DH { . 

(c) let i = »+l. Process PN can be further generated by going back to step (6), otherwise, 
it is given by 

J?= |J B it E= (J E h H= (J H^ 

0<j<i 0<j<i «Kj<» 

It is important to note that step 62 is most crucial in the algorithm, and means that 
for each place p G Pi : 

• If \p- 1 > 1 (e.g. p- = {<!, t 2 }) then A(p) is chosen nondetermistically (e.g. A(p) = < 2 )- 
Since p is a free-choice place, t 2 has no other input places and it can be included in 
Ti. 

• If \p • | = 1 (e.g. p- = {t}) then A(p) = t. In this case, however, t may have other 
input places (i.e., -t > 1); t is included in 7} only if all conditions corresponding to -t 
have already occurred in the process generated thus far. 

An example of net-unfolding applied to a LSFC net (Fig. 9.3a) is shown in Fig. 9.3b. 
Notice that only some of 2? t 's are b-cuts, some of U.'s are e-cuts. 

Folding of a process of a LSFC net is rather simple and uninteresting; nevertheless, we 
describe it here to motivate the folding operation — similar in spirit — required for STGs 
with non-input choices. 

Let E be a LSFC net and PN a process of S, obtained by applying the above unfolding 
algorithm. In order for PN to reproduce the original net S when folded, elements of PN 
must map to the set of all elements of S. In other words, the smallest process PN which 
can be folded back into S must satisfy 
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Figure 9.3: A demonstration of the net unfolding algorithm, as applied to a LSFC net (a) 
to produce a process (b). 
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(i) <f>("N) = <f>(N°) C {p | M (p) = 1} and 
(ii) B U E is the minimal set such that <£(!? UE) = PUT. 

Such a process will be called complete. The following net folding algorithm is applied to 
complete processes of LSFC nets. 

Algorithm 9.6 (Net folding) Lei E = (P, T, F, M ) be a LSFC net and PN = (B, E, H; <f>) 
a complete process of E. Let N = {B, E, H) be the associated occurrence net. Then 

P = 4>{B), 
T = <f>(E), 

F = {(<f>(x),<Ky))\(x,y)eH}, 
M = <f>(°N). 

It is a simple matter to check that by using the above definition, the process in Fig. 9.3b 
can indeed be folded back to the net in Fig. 9.3a. The reason why the folding of such a 
finite process reproduces the original LSFC net should be intuitively clear: when folded 
back, every place will have the same input and output transitions again. Likewise, every 
transition will have the same input and output places again; however, this is trivially true 
because by definition, a process preserves the input and output conditions of all events. 
This folding procedure reproduces the original net provided that the process contains at 
least one instance of every element of the original net. 

We are now ready to discuss the expansion algorithm for producing a STG/IC from a 

STG/NC. 



9.2.2 The Expansion Algorithm 

Similar to the unfolding and folding algorithms developed for LSFC nets above, the ex- 
pansion of STG/NCs also consists of two stages corresponding to unfolding and folding. 
First, we present an unfolding algorithm for STGs with input choices. This algorithm is 
identical to the one for free-choice nets given above (Algorithm 9.5), with the exception 
of step 62. In the previous unfolding algorithm, at every unfolding step, the allocation 
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function A(P.) is determined by randomly picking an output transition for every place 
p € Pi with more than one output transitions. For STG/NCs, a process can be generated 
in a similar manner; however, when a place p € P, with labeled output arcs is encountered, 
an output transition is chosen depending on which arc label holds — the choice of which 
output transitions to pick is no longer free but dependent on a condition which can be 
determined from the process generated thus far. Below we will only describe the first part 
of step 62 for the new unfolding algorithm; this part involves the determination of the 
allocation function. 

Algorithm 9.7 (Unfolding of STG/NC) First part of step 62: Choose the allocation 
function A(P t ) as follows. 

62.1 If 3p 6 Pi such that p has no labeled output arcs then a transition t G p- is picked 
randomly. 

62.2 Otherwise, if 3p 6 Pi such that p- = {t u t 2 , ...,<„} and A(p, t m ) = a m , 1 < m < n, 
then A(p) = t m only if a m holds at B { . 



Important remarks. Case 62.1 is the same as one in the previous algorithm. For the 
new case 62.2, we have the following remarks. 

• In order for the choice to be deterministic at B„ it is required that exactly one a m 
holds at Bi. Thus in the STG specification, the set {a u a 2 , . . . , a n } must be chosen 
such that every time place p is marked, only one condition in this set can become 
true. On the other hand, if it is possible for more than one of them, say a, and a_,, 
to hold at Bi then both i, and t, are enabled. This situation will lead to problems 
as discussed in Chapter 8, concerning the specification of non-input choices. 

The above requirement ensures that every transition in p- is enabled in a marking 
with a distinct binary representation, as illustrated by the example at the end of 
Chapter 8. 

• As mentioned at the beginning of Chapter 8, for STG/NC, we impose the restriction 
that 

Vp G P,Vt £ T : if A(p, t) = a m then {p, m,} £ co, where a m € {{m, 0), <m, 1)}. 
That is, p cannot be concurrent with any transition of signal m. 
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If this restriction is satisfied, then in the process PN of the STG, all instances of 
p, m+ and ra_ must belong to the same line. Thus by definition, in PN, any cut 
containing an instance of p cannot contain instances of m+ or m_. Therefore, if 
a m holds at a b-cut B t such that p € <£(!?,), then a m holds at any other b-cut B\ 
such that p e (j^B'i D B { ). This is the reason why in step 62 above, it is sufficient to 
consider the holding of a m at only one b-cut (instead of all b-cuts) containing p. 
Conversely, without this restriction, then to determine whether a m holds at p, one 
needs to check every b-cut B' t such that p € <£(£,' n B t ). But in general, this is 
impossible because the process generated thus far may not contain all such b-cut 
B[. Therefore, this restriction is of fundamental importance; without it a STG/NC 
cannot be unfolded into a process. 

By using the above algorithm, the STG T,j = {P, T, F, M ; X) can be iteratively unfolded 
into a process PN = {B, E, H; <f>). When the algorithm is stopped, i = n for some positive 
integer n and 

B= (J B it E= U %, H= U Bi. 

0<j<n 0<j<n 0<j<n 

Similar to the algorithms for free-choice nets, in order for the process generated to 
exhibit all possible behavior of the original STG when folded, we require that it be complete 
and has a consistent state assignment. That is, process PN must satisfy the following 
conditions which together constitute the completeness of processes of STGs. 

Definition 9.8 (Complete Process of a STG) Let Ej = (P, T, F, M Q ; X) be a STG/NC 
and PN = {B,E,H;<f>) a process ofT,j. Let N = {B,E,H) be its associated occurrence 
net; B = °N and B n = N°. Then PN is a complete process of Ej if the following 
conditions are satisfied: 

(a) <f>(B ) = <j>{B n ) C {p e P | M (p) = 1}. 

(b) BUE is a minimal set such that <f>(B U E) = P U T. 

(c) PN has a consistent state assignment and [S , B n ] forms a complementary set. 

Note that (a) and (6) are the requirements for processes of free-choice nets to be 
complete, as discussed earlier. The last condition (c) implies that B and B n have the 
same binary representation, i.e., a(B ) = a(B n ). 
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The folding procedure consists of two steps. First, a complete process is folded by 
merging b-cuts B and B n to produce a strongly connected net. Then, free-choice places 
are merged, using the recursive merge function defined later. Controlled-choice places are 
not merged. The result is a free-choice net which behaves exactly like the original STG/NC; 
however, this new net can be synthesized using the techniques developed earlier. 

Algorithm 9.9 (Folding of STG/NC) Let Sj = (P,T,F,M ;A) be a STG/NC and 
PN = (B,E,H;<f>ran a complete process generated from it using the unfolding algorithm 
described above. Then PN can be folded back into a net Ej using the following procedure. 

(a) Merge B and B n : V6 G B , W E B n such that <f>(b) = <j>(b') : replace b' with b in 
B, E, H and <f>. 

(b) Merge free-choice places: For all b,b' G B such that </>(b) = <f>{b') = p£P and p is a 
free-choice place, 

if there exist b-cuts B h Bj, i < j, such that b 6 B { , V e Bj and [B„ Bj] forms a 
complementary set 
then merge(b, b'). 

(c) The expanded net T,'j = (P', T', F', M' Q ) is given by 

P' = B (<t>(P') = P) 
T' = E (V(T') = T) 
F' = H 
M' = B . 

Given the process PN = (B, E, H; <t>), the merge function recursively merges elements 
of the process together and update all components B, E, H and <f> of PN. Input to the 
merge function is a pair of elements (x 1 ,x 2 ) of the same type (conditions or events), they 
are merged into a single element named x\. 

Function mergfe(z 1 ,z 2 ) 

Replace all x 2 with xi in B, E, H and <f>; 

For every y u y 2 such that ^(yj) = <j>(y 2 ) A (y r = y 2 • V • y x = -y 2 ) : 
merge(y u y 2 ) 
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Remarks. The above folding algorithm is the same as one for LSFC nets, except that 
only conditions corresponding to free-choice places are merged together, whereas those 
corresponding to controlled- choice places are not. This algorithm accomplishes the last 
stage of the expansion algorithm. The essential idea of the expansion algorithm is to split 
states with non-input choices. This is carried out in two stages: splitting all states with 
input and non-input choices and then merging states with input choices. The first stage 
corresponds to unfolding the STG/NC into a process; the second folding the process back 
into a STG/IC by merging only free-choice places. 

In this algorithm, conditions in a process are merged only if (i) they map to the same 
free-choice place in the net and (ii) the b-cuts containing them must map to the same binary 
state. Requirement (ii) is unique to processes of STGs and it allows one to determine when 
conditions can be merged together. Specifically, this requirement appears in the following 
steps of the algorithm. 

• In step (a), if PN has a c.s.a. then the binary states corresponding to the b-cuts 
Bo and B n must be identical: a(B ) — ot{B n ). This implies that the state graph is 
strongly connected (and is therefore live). 

• In step (b), if the b-cuts I?, and Bj are such that [Bi, Bj] forms a complementary set 
and PN has a c.s.a., then they have the same binary representation: a{B{) = oi(Bj). 
Hence in the state graph representation of PN, every event enabled in Bi will also 
be enabled in Bj and vice versa — this is exactly a free-choice situation. Thus, even 
though Bi and Bj appear to be separate b-cuts in PN, due to the fact that they 
have the same binary representation, they actually map to a p-cut containing the 
same free-choice place. It is important to realize that only by considering the binary 
representation of b-cuts, one can guarantee that they can be merged into free-choice 
places. If two b-cuts map to the same free-choice place but they do not have the 
same binary representation then they cannot be merged. An example illustrating 
these rules will be described next. 

9.2.3 An example 

In this section, we present another example of a control circuit with data-dependent oper- 
ation which is used together with an arbiter to control access to shared resources. This is 
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called a Resource Locking Module (RLM) which communicates externally using the reset- 
signaling protocol. The reason for presenting this example is that its STG specification 
contains both free-choices and controlled choices, thus allowing a demonstration of the 
expansion algorithm just described. In the previous example of the two-cycle FIFO con- 
troller, its STG specification contains only controlled-choices. Hence, when the expansion 
algorithm was applied, no merging was needed; the net was unfolded into a process and 
then simply folded back at b-cuts corresponding to initially marked places. 

Fig. 9.4a shows the block diagram of a circuit in which there are two RLMs connected 
to a two-input arbiter. Each RLM has a set link {S r , S a }, a clear link {C r ,C a } connected 
to the external environment, and a lock link {L r , L a } connected to one port of the arbiter. 
When a set-request arrives at S r , the RLM forwards it to L r , awaits for acknowledgement 
on L a and passes it back to 5 a . This signifies that the arbiter has been locked. When the 
set-request S r is dropped, the module immediately drops S a in response, leaving L r high 
to lock up the arbiter. From here on, any set-request will be acknowledged immediately 
through S a . In order to unlock the arbiter, instead of a set-request, a clear-request C r is 
sent to the RLM. This will reset L T to low, which in turns will cause L a to drop. The 
module responds by raising C , and when C r is dropped, it will drop C a in return, thus 
completing a clear cycle. A subtle timing requirement for the arbiter is that the input 
request at its other port is disallowed until signal L a has gone low at this port. Such an 
aribter design is described in [10] and contains some subtle difference to that suggested by 
Seitz and also Plummer [40]. 

The STG specifying the operation of the RLM is shown in Fig. 9.4c; the logic imple- 
mentation derived from the STG is shown in Fig. 9.4b. It can be easily verified that this 
circuit works according to the specification. In this STG, po is a free-choice place; pi is 
controlled-choice place with arc labels (L o ,0) and (L a , 1). The variables controlling data- 
dependent operations are S r ,C r and L a . The control state graph is shown in Fig. 9.4g, 
where states are values of the vector (S r ,C r ,L a ). In the initial state s of the system, the 
values of all signals in (5 r , 5 , C r , C a , L r , L a ) are 0: s Q = 000000. 

This STG can be unfolded into a complete process which is a line because the system is 
totally sequential. As indicated in Fig. 9.4d, this line has four instances of place po, denoted 
by P%, p\, pl and p%. For clarity, only these instances of place p are drawn explicitly, other 
places are omitted from the figure. The fine segment between p% and pj corresponds to 
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Figure 9.4: (a) The block diagram of the RLM and its (b) logic implementation. Its STG 
specification (c) is unfolded into a complete process (d), then folded back into the STG in 
(e). (f) The state graph of the STG in (e). (g) The control state graph. 
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traversing the left branch of the net, with (L a , 0) being true. The segment between p\ and 
pi corresponds to the left branch of the net, but with (L a , 1) being true. The last segment 
between p\ and p% corresponds to the right branch of the net. 

This process contains instances of every element in the net and hence satisfies the 
completeness conditions described earlier. It is folded to produce the STG/IC shown in 
Fig. 9.4e as follows. 

• Conditions p£ and p„ are merged together to form a strongly connected net. 

• Conditions p\ and p\ are merged together because [p\, pjj] forms a complementary set. 
Then, to complete the folding, events input to p\ and p\ corresponding to transitions 
5 _, S r - and S a + are also merged together. 

Fig. 9.4f is the state graph of the STG/IC in Fig. 9.4e. This state graph can be 
decomposed to produce smaller state graphs for non-input signals {S a ,C a ,L r }. From the 
STG/NC in Fig. 9.4c, we find 

I(S a )={L a ,S r } 
I(C a )={L a ,C r } 
I(L r )={L a ,S r ,C r }. 

The logic implementation can be carried out by first deriving the contracted state graph for 
every non-input signal directly from the state graph given in Fig. 9.4f and then determining 
its logic equation. The final implementation is given in Fig. 9.4f; its derivation can be easily 
verified. 



9.3 Properties of STG/NCs 

In this section, we examine a number of relevant properties of STGs with non-input 
choices. One of the important issues to be addressed is the behavioral equivalence be- 
tween a STG/NC and its expanded STG/IC; this will be managed by showing that the 
two STGs are equivalent iff they unfold into the same complete process. Another issue is 
the liveness property of STG/NCs; by examining this property we will be able to provide 
some insights into the construction of STG/NCs from initial informal specifications. One 
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last issue is how to characterize the temporal relation in such nets, i.e. how to determine 
whether two transitions are ordered, concurrent or in conflict using previous techniques. 

It will be seen that the key concept used is that of complete processes. As described 
earlier, even though a complete process is acyclic and contains only a typical record of a 
net's execution, it still can reproduce the total behavior of a net in the form of a state graph. 
Such a state graph is constructed by merging markings with the same state assignment. 
Due to this fact, complete processes of STGs contain more information than conventional 
processes of FC nets. 

In the rest of this section, we will consider a STG/NC Ej = (P, T, F, M ; A) which 
can be unfolded into a complete process PN = {B,E,H;<f>). This complete process can 
then be folded to produce a expanded net Z'j = {P',T',F',M' ). Let N z = {P,T,F) and 
JV E , = {P',T',F') denote the underlying net structures of Sj and Ej, respectively. Then 
by definition, both N% and N^> are free-choice nets. 

Behavioral equivalence between STG/NC and STG/IC 

Below, we sketch the reasoning for establishing the behavioral equivalence between a 
STG/NC and its expanded STG/IC: when Ej is successfully expanded into Ej, their 
behaviors are equivalent. Two nets are behaviorally equivalent iff they have the same trace 
set or equivalently, the same finite automaton. 

The key point is to show that if two nets are behaviorally equivalent, they must unfold 
into the same complete process. Suppose that 

• Ej can be unfolded into a complete process PN and the latter folded back into the 
expanded net Ej. 

• Sj can be unfolded into another complete process PN'. 

Then it is easy to see that it is possible to choose a transition sequence of control signals 
such that the unfolding of iV E » and JVs yield the same process, i.e. PN and PN' are 
identical; such a control sequence is recorded in the control state graph (CSG) described 
earlier. Hence, we can conclude that if Ej can be expanded into a live-safe net Ej then 
they are behaviorally equivalent. 
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Liveness of STG/NCs 

Recall that earlier, we defined liveness of STGs in terms of their state graphs: a STG is 
live iff its state graph is strongly connected. For STG/NCs, the same definition can be 
employed. Since the state graph of a STG/NC is obtained through its expanded net, a 
STG/NC is live iff its expanded net is live. The expansion algorithm successfully produces 
a live expanded net if the original STG/NC can be unfolded into a complete process. Thus, 
we have the following result. 

Lemma 9.10 A STG/NC is live iff it can be unfolded into a complete process. 



Hence in order to verify that a STG/NC £j is live, one may need to apply the net- 
unfolding algorithm and check if the unfolded process is complete. If so, by folding the 
process, a live expanded net is then obtained. However, often times it is more convenient 
to use a certain necessary liveness condition directly on a STG/NC before unfolding. If 
this necessary condition is not satisfied by the STG/NC then it cannot be unfolded into a 
complete process. We study such a condition through an example below. 

Consider a FC net as shown in Fig. 9.5a. This net is safe but not live because only 
two MG-components resulting from MG-reduction are live-safe, as indicated in Fig. 9.5c. 
Let's consider a firing sequence which leads to deadlock in Fig. 9.5a: in marking {pi,P2}, 
transitions ti,t 2 ,t 3 and t 4 are all enabled, if t x and t A are chosen (nondeterministically) 
to fire, then & and p 6 are marked. At this point the net's operation halts as there is 
no token to enable t h and < 6 . Suppose now that instead of allowing the choices to be 
nondeterministic, we require that whenever places {^fr} are marked, the pair {*i,* 3 } be 
chosen to fire together, and similarly {t 2 , t 4 } together. In this case, the net's operation 
is live and safe. This is one basic motivation behind the use of controlled choices. The 
STG/NC corresponding to this case is shown in Fig. 9.5b: output arcs of places {pi,p2} are 
labeled with (a, 0) and (a, 1); in addition, transitions t s and t 6 are interpreted as t s = a_ 
and t 6 = a + . 

The following lemma states a necessary condition on the underlying net of a STG/NC 
in order for it to be live-safe. 
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Figure 9.5: (a) A non-live FC net and (b) a STG/NC with the same underlying net. 
(c) Two live-safe MG-components. (d) Two live-safe SM-components, one of which is 
expanded into a simple cycle (e). 

Lemma 9.11 Let £j be a STG/NC and JV E be its underlying free-choice net. Then 
STG/NC is live-safe only if there exists a set of MG-components which cover JVg. 



In a similar fashion, we see that only two SM-components resulting from SM-reduction 
on Fig. 9.5b are live-safe; they are depicted in Fig. 9.5d. Notice that each of these SM- 
components is itself a controlled-choice net. These SM-components can be expanded into 
simple cycles; Fig. 9.5e illustrates the case for the SM-component on the left of the figure. 
Let us consider a necessary condition for this controlled-choice net to be live. Obviously, 
it is live if its expansion yields a simple cycle as just mentioned. This condition in turns 
requires that a+ not be ordered with t x , and a_ not ordered with t 2 . For suppose that 
t 5 = a+ in Fig. 9.5d, then a+ is ordered with tj and the simple cycle Po<oPi*iP3*5Po (where 
U = a+) will contain an arc labeled with (a, 1). In which case, the control variable (a, 1) 



9.3. PROPERTIES OF STG/NCS 177 

will always be true, thus restricting the net's operation in this simple cycle and the other 
branch of the net can never be activated, resulting in non-liveness. Hence, for every 
controlled-choice place p and transition t such that X(p,t) = (a, 1) (or (a, 0)), the above 
condition requires that there exist no simple cycle containing t and a + (or a_). 

In a STG/NC, we require that for every place p and transition t G p- such that p 
is a controlled-choice place and A(p,t) € {(a,0), (a, 1)}, p not be concurrent with any 
transition in {a+, a_}. Also, since t is not allowed to belong to the same simple cycle with 
{a + ,a_}, it follows that t and a+ must be in conflict in the underlying free-choice net (of 

the STG/NC). 

Construction of STG/NCs 

So far in this chapter, we have discussed the expansion algorithm for converting a STG/NC 
into an expanded net which corresponds to a LSFC net. That discussion assumes that a 
"correct" STG/NC is given. However, the construction of a STG/NC specification is 
generally not an easy task, because such a specification may involve complex interactions 
between choices and concurrency. 

The above illustrative examples provide us with some insights for the construction 
of STG/NCs. As evidenced throughout this chapter, one of the key concepts is that of 
a complete process. Besides specifying all possible concurrent behavior of a system, it 
also contains extra information allowing one to reconstruct the fret-choices. Hence in the 
following procedure for STG/NC construction, we start with a process. 

(a) Build a complete process: Construct an initial process according the concurrent be- 
havior of a system. This process must contain segments representing possible choices 
of actions. The process can then be made complete, possibly by adding extra internal 
transitions. 

(b) Select control variables: The complete process can be folded into a free-choice net, 
and arc labels corresponding to control choices can be added to obtain a STG/NC. 

(c) Check for live-safeness: The necessary conditions for live-safeness for such a STG/NC 
can be verified as follows. The STG/NC is live-safe only if (i) its underlying net is 
free-choice, (ii) there exists a set of live-safe MG-components which cover it, and 
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(iii) control variables are chosen such that every MG-component in this set can be 
activated at some marking reachable from the initial marking. 

Temporal Relation in STG/NC 

Previously, we have provided a syntactic characterization of the temporal relation for LSFC 
nets. However, due to the presence of controlled choices, this characterization does not 
apply directly to STG/NCs. As discussed earlier, the introduction of controlled choices 
into a STG imposes further restrictions on the set of firing sequences of the net. We will 
show that such restrictions only affect the sequential but not the non-sequential behavior 
of the net, and concurrency is preserved. 

Let Sj be a STG/NC and T,'j be its expanded net; their underlying net structures are 
denoted by JV E and JV E ». Since all arc labels are not considered in iVg, both N% and N%i 
are FC nets. Let tr = li U co U cf and tr' = li' U co' U cf be the temporal relations defined 
in JV E and JVjy, respectively. Note that tr is the temporal relation in the underlying FC 
net of Sj; it is not the temporal relation in the STG/NC, which is really given by tr'. In 
the following we study the relationship between tr and tr'. 

We can determine the temporal relation tr 7 of the STG/NC Sj from its expanded net 
Sj which is a STG/IC. The underlying net JV E » of the expanded net is a FC net and thus 
previous characterizations of the temporal relation apply. 

First, note that a prerequisite for two transitions in the expanded net TV's;/ to be con- 
current is that they are concurrent in N^. This is because the expanded net is obtained 
by unfolding iV E into a process and then folding the latter into JV S /. In a process, all 
conflicts must have been resolved, and concurrency between instances of transitions must 
be preserved. Hence concurrency is preserved: co' C co. 

The situation with ordering and conflict is slightly more complicated. The example 
given in Fig. 9.5 demonstrates that due to controlled-choices, the number of transitions in 
conflict in a STG/NC (Fig. 9.5b) cannot be more than that in its underlying FC net. In 
the expanded net, a controlled-choice place in a STG/NC is eliminated during unfolding. 
Hence: dc' C dc. 

On the other hand, Fig. 9.5e shows that a SM-component of a STG/NC can be 
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expanded into a simple cycle. This implies that: 

(i) Two transitions are in conflict in the expanded net JVjy only if they are also in conflict 

in 7V E : cf' C cf . 
(ii) On the other hand, if two transitions are ordered in the expanded net N-^i then in 

JVs, they may be either ordered or in conflict: li' C li U cf . 
(iii) If two transitions are ordered in N% then in the expanded net N%i they must also be 

ordered: li C li'. 
(iv) If two transitions are in conflict in Nz then in the expanded net N^i they may be 

either ordered or in conflict: cf C cf U li'. 

From these facts, we can deduce an equality (vii) as follows: 

(iv) =» cfCli'Ucf' 

=► liUcf CliUli'Ucf 

(iii) =J> liU cfCli'Ucf (v) 

(i)&(ii) =► li'Ucf CliUcfUcf = liUcf (vi) 

(v)&(vi) =► li'Ucf = liUcf (vii) 

The above results are summarized in the following lemma, which simply states that when 

a FC net is converted into a STG/NC by adding arc labels, both sequentially and non- 

sequentiality are preserved. 

Lemma 9.12 Let £j and Sj be a STG/NC and its expanded net; N% and N& their 

respective underlying nets, as defined above. Then 

co' C CO 
li'Ucf = liUcf. 

The above result ensures that (i) if two transitions are not concurrent in the underlying 
net JVe of a STG/NC, then they will not be concurrent at all, and (ii) if they are ordered 
or in conflict in iVj; then they will also be either ordered or in conflict in the expanded net 

9.4 Summary 

In this chapter, we have presented an algorithm for converting STG specifications with 
non-input choices to ones which contain only input choices. The most crucial underlying 
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concept of STG/NCs and this expansion algorithm is concerned with the behavioral (i.e. 
firing sequence) semantics of nets: STGs are considered as high-level representations of 
state graphs. In particular, the use of controlled-choices can be thought of as a further 
restriction of the trace set derived from a STG. Similarly, the expansion algorithm basically 
manipulates the state graph from a higher level and it performs the splitting of states with 
non-input choices. By requiring that arc labels of a controlled-choice place never hold 
simultaneously at the moment that place is marked, we can guarantee that split states 
have distinct binary representations. 

One important concept in this chapter is that of a complete process. Even though it is 
acyclic, such a process contains enough information concerning the complete behavior of 
the system, so that from it choices between alternate control events can also be deduced. 

One fundamental requirement in order for a STG/NC to unfold into a process is that 
transitions of a control variable not be concurrent with transitions which are output tran- 
sitions of the controlled-choice places. This is a fundamental requirement, because the 
only way to determine the state of a control variable, say j, at a marking (at which a 
controlled-place, say p, is marked) is for the transitions of the variable ;' to be ordered 
with p; otherwise, it is impossible to tell exactly. 



Chapter 10 

Suggestions for further research 



In this short chapter, we suggest areas for further research. Some of the extensions to the 
STG model to be discussed are: 

• Development of high-level hardware description languages for the specification of 
self-timed systems. 

• Techniques for composition and decomposition of self-timed control circuits based on 
STGs. 

• Performance evaluation and optimization of control circuits synthesized from STGs. 

• Pragmatic issues concerning the use of STGs in silicon compilation. 

High Level Hardware Description Language 

Even though the design approach based on STGs allows the direct and efficient synthesis 
of control circuits, one of its shortcomings is that STGs are rather low level: A behavior 
specification of a control circuits in terms of STG requires the tedious enumeration of its 
exact behavior at the level of signal transitions — this is especially true for control circuits 
whose operation involves both concurrency and choices, such as the FIFO module described 
in Chapter 8. To alleviate this problem, we need (i) more abstract specifications which can 
be refined iteratively to produce more detailed descriptions and (ii) a design methologoly 
for self-timed systems. A reasonable strategy involves the use of a high level description 
language to serve both purposes. 

181 
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• A high level language provides an abstraction of detailed implementation which can 
be refined subsequently. For instance, at the more abstract level of specification, 
it should be possible to represent parts of a STG as single events; signal transi- 
tions specifying the communication protocol between control modules should also be 
represented as single synchronization events. 

• A high level language can be used to enforce a design style on the use of STGs. In 
particular, the syntax of the language can be used to disallow "bad" constructions. 
For instance, in the CSP-like language proposed by Martin [30], each module is rep- 
resented by a sequential process; parallelism is achieved by having many sequential 
processes commnunicating with each other through synchronization. Obviously, the 
design style imposed by such language is that each module can perform only sequen- 
tial operations; concurrency results from the interconnection of sequential modules 
operating in parallel. 

STGs allow the specification of control modules with inherent parallel operation (such 
as the FIFO module in Chapter 8) as well as those with sequential operation and choices 
(the RLM in Chapter 9). Thus the description language for STGs should not prohibit 
the specification of concurrent operation internal to modules. Our strategy is to iden- 
tify a design approach for STGs and then develop language constructs which allow the 
description of hardware control circuits according to the design approach. Some of the 
possible candidates for our hardware description language include paih expressions [1] and 
PADL [29], to name a few. The semantics of path expressions in terms of Petri nets has 
been studied in [6]. On the other hand, PADL is designed expressly for the description of 
packet architectures which are related to data flow graphs. A net semantics can be easily 
developed for a subset of PADL. 

Composition and Decomposition 

The design of a system is unmanageable unless there is a hierarchical approach which 
allows the system to be decomposed into components, each desgined separately and then 
composed together to form the whole system. The important issue here is the correctness of 
such systems when the decomposition and composition steps are taken: how to guarantee 
that the behavior of the original system before decomposition is the same as that of one 
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composed from interconnecting modules, each corresponding to a decomposed part of the 
system. 

The firing sequence (trace) semantics can help: properties of composed and decom- 
posed systems can be reasoned using traces and operations on traces. Many ideas and 
mathematical results developed for CSP can be applied with some modification; these 
include high-level specifications, proof rules, etc. 

This thesis has developed a useful result concerning the equivalence between the be- 
havior of a FC net and the aggregate behavior of a set of contracted nets. This is an 
instance of decomposition and composition of nets. However, it differs from composi- 
tion/decomposition in general in that the former starts out with a net whose live-safeness 
properties are known ahead of time, while in the latter, these properties have to be proven 
for the system composed from modules. 



Performance Evaluation and Optimization 

STGs allow the specification and direct implementation of speed-independent control cir- 
cuits; circuits obtained from STGs are hazard free regardless of changes in the delays of 
logic components. Nevertheless, it is always important to be able to determine the tim- 
ing performance of control circuits so that their critical parts can be optimization when 
needed. 

One can take the simple view of a STG as specifying the timing constraints between 
signal transitions; a constraint such as »„ -► j„ is implemented as a logic element with 
input i and output j. Thus a time delay d can be associated to the arc i. -► j„ to represent 
the delay between transitions of signals t and j. This delay can be determined from the 
logic implementation. 

By calculating the delay values and associate them to all causal arcs in a STG, a timed 
model is obtained. Techniques in Timed Petri nets [33] can then be applied directly for 
the purpose of performance analysis and optimization. 

One specific type of optimization is the transformation of a speed-independent imple- 
mentation into one which is only hazard-free. Recall that speed-independence means that 
a circuit is hazard-free for any combination of delays of logic gates. By determining the 
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Figure 10.1: Transforming a speed-independent circuit into a hazard-free circuit, (a) By 
removing synchonization constraints, (b) By resetting modules in parallel. 



bounds on their delays, one can remove some of the causal constraints for synchronation 
from the STGs without affecting the correct operation of the circuit. For example, in the 
STG of Fig. 10.1a, the delays of the subgraph G\ and C?a can be determined from their 
logic implementation to be d\ and d^, respectively. If mindi > max da then the transition 
y which synchronizes the actions of G\ and Gj can be removed. Such an optimization 
results in a saving of logic gates and an improvement in speed. 

Another type of optimization is a well-known technique for reducing the total delay 
of an operation cycle using the reset signaling protocol, as illustrated in Fig. 10.1b. If a 
number of non-pipelined modules are connected in tandem, the input request to the leftmost 
module must propagate through the all of them before an acknowledge is transmitted back. 
In the reset phase of the signaling protocol, the input request is reset and it is allowed to 
propagate through the modules. The operation is completed when the acknowledge is 
reset by the leftmost module. The operation during the reset phase of the cycle does 
not involve any useful work but only resetting the modules to their previous quiescent 
state. The total delay can be reduced by connected the leftmost input request signal to 
all modules in the chain, so that they can be reset to their initial state in parallel. The 
time required for reseting can thus be reduced to a constant. This technique works well in 
practice even though the circuit can no longer be guaranteed to be speed-independent. In 
CMOS technology, there is a natural way to implement this technique using domino logic, 
as demonstrated in [10]. 
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Pragmatics 

One of our goals is to use STGs as & formal specification of control circuits in a hard- 
ware architecture for self-tuned systems, it is perfe c % iw s j i li to* build design-aid tools 
for the automatic design of self-timed system*. Seme praclfeeal Issues of concern are the 
specification and design of data paths, and the choke qfmurtwsrc medium for V£St kn- 
pkmentatton. 

The data-path components of such an hardware architecture can also be specified in 
terms of Petri nets; they can be implemented usmg dual-feft eedlag or matched delay tech- 
ntaues. A hardware inmlementaiion bseed en les^ar semen ssBaSartoPs^'sseYnchreQous 

logic arrays [38] seems to be adTantageous and practical 
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